# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-727.el9]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188090]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-190412]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155389]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Jan Polensky) [RHEL-190426]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Jan Polensky) [RHEL-190425]
  - x86/mce: Restore MCA polling interval halving (David Arcari) [RHEL-208634]
  - powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (David Arcari) [RHEL-192478]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179295] {CVE-2026-46099}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185961]
  - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189960] {CVE-2026-22979}
  - Bluetooth: btintel_pcie: Fix incorrect MAC access programming (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: treat boot stage bit 12 as warning (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: use strscpy to copy plain strings (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Align shared DMA memory to 128 bytes (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pci: Fix btintel_pcie_read_hwexp code style (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpious2, Nova Lake-PCD-S (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add device id of Scorpius Peak2, Nova Lake-PCD-H (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2F (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2F support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Add support for exception dump for ScP2 (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add DSBR support for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for Scorpious Peak2 support (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Replace CNVi id with hardware variant (David Marlin) [RHEL-117330]
  - Bluetooth: btintel: Add support for hybrid signature for ScP2 onwards (David Marlin) [RHEL-117330]
  - Bluetooth: btintel_pcie: Replace snprintf("%s") with strscpy (David Marlin) [RHEL-117330]
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/mtrr: Modify a x86_model check to an Intel VFM check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/microcode: Update the Intel processor flag scan check (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/cpu/intel: Fix the MOVSL alignment preference for extended Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - x86/apic: Fix 32-bit APIC initialization for extended Intel Families (Luis Claudio R. Goncalves) [RHEL-184789]
  - ceph: fix NULL pointer dereference in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix multifs mds auth caps issue (Alex Markuze) [RHEL-180666]
  - ceph: fix memory leak in ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix cred leak in ceph_mds_check_access() (Alex Markuze) [RHEL-180666]
  - ceph: pass cred pointer to ceph_mds_auth_match() (Alex Markuze) [RHEL-180666]
  - ceph: fix a memory leak on cap_auths in MDS client (Alex Markuze) [RHEL-180666]
  - doc: ceph: update userspace command to get CephFS metadata (Alex Markuze) [RHEL-180666]
  - ceph: add CEPHFS_FEATURE_MDS_AUTH_CAPS_CHECK feature bit (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for async dirop (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for open (Alex Markuze) [RHEL-180666]
  - ceph: check the cephx mds auth access for setattr (Alex Markuze) [RHEL-180666]
  - ceph: add ceph_mds_check_access() helper (Alex Markuze) [RHEL-180666]
  - ceph: save cap_auths in MDS client when session is opened (Alex Markuze) [RHEL-180666]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180065] {CVE-2026-46150}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175657]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168069] {CVE-2026-31419}
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152699]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152699]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
changelog:
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190343]
  - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191440] {CVE-2026-53185}
  - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-100912]
  - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-100912]
  - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-100912]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188545] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188460] {CVE-2026-53016}
  - RAS/AMD/ATL: Require PRM support for future systems (Joel Savitz) [RHEL-122804]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
changelog:
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
  - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
  - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
  - arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
  - ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-730.el9]
changelog:
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-208620]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (David Arcari) [RHEL-212712]
  - i2c: i801: fix hardware state machine corruption in error path (David Arcari) [RHEL-212646]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141219]
  - scsi: megaraid_sas: struct MR_HOST_DEVICE_LIST: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-141219]
  - redhat/configs: new configs in phy (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128158]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128158]
  - treewide, timers: Rename from_timer() to timer_container_of() (Izabela Bakollari) [RHEL-128158]
  - net: phylink: provide mac_get_caps() method (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for FBNIC 25G, 50G, 100G PMD (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Add support for 25G, 50G, and 100G interfaces (Izabela Bakollari) [RHEL-128158]
  - net: phy: Add MDIO_PMA_CTRL1_SPEED for 2.5G and 5G to reflect PMA values (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move probe/remove calling of init/exit (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove eee_usecs_rate (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix CSR divider comment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128158]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix resume: calculate tso last_segment (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix the crash issue for zero copy XDP_TX action (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix rx limit check in stmmac_rx_zc() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac: Disable flushing frames on Rx Buffer Unavailable (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Fix PMA identifier handling in XPCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: Use generic PCI suspend/resume routines (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add generic suspend/resume helper for PCI-based controllers (Izabela Bakollari) [RHEL-128158]
  - net: mdio: remove redundant fwnode cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use read_poll_timeout_atomic() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add rgmii set/clear functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: use u32 for rgmii read/write/update (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove axi_blen array (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to axi_blen init sites (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_axi_blen_to_mask() to stmmac_main.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide common stmmac_axi_blen_to_mask() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move common DMA AXI register bits to common.h (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: simplify switch() in dwc_eth_dwmac_config_dt() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pass struct device to init()/exit() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() returns boolean (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stmmac_is_jumbo_frm() len should be unsigned (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert priv->sph* to boolean and rename (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128158]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128158]
  - net: phy: Remove probe_capabilities (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128158]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128158]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128158]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128158]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128158]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100498]
  - stmmac: Replace deprecated PCI functions (Izabela Bakollari) [RHEL-100498]
  - stmmac: Remove pcim_* functions for driver detach (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Remove surplus loop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100498]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100498]
  - stmmac: loongson: Pass correct arg to PCI function (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to use hrtimer_setup() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100498]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-s32: add basic NXP S32G/S32R glue driver (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-sti: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-starfive: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-rk: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-intel-plat: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-imx: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix clock rate variables size (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Extend CSR calc support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100498]
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix the wrong register that was written back (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: silence FPE kernel logs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-taprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: support fp parameter of tc-mqprio (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: configure FPE via ethtool-mm (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: refactor FPE verification process (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop stmmac_fpe_handshake (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: move stmmac_fpe_cfg to stmmac_priv data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Batch set RX OWN flag and other flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-sun8i: Use for_each_child_of_node_scoped() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: drop the ethtool begin() callback (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Add GMAC support for RK3576 (Izabela Bakollari) [RHEL-100498]
  - ethernet: stmmac: dwmac-rk: Fix typo for RK3588 code (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add loongson module author (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson GNET support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add Loongson Multi-channels GMAC support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add DT-less GMAC PCI-device support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Introduce PCI device info data (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Detach GMAC-specific platform data init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop pci_enable/disable_msi calls (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-loongson: Drop duplicated hash-based filter size init (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Export dwmac1000_dma_ops (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add multi-channel support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: xgmac: use const char arrays for string constants (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac4: fix PCS duplex mode decode (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Correct byte order of perfect_match (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Add DW XPCS specified via "pcs-handle" support (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Create DW XPCS device with particular address (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add fwnode-based descriptor creation method (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add Synopsys DW xPCS platform device driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Introduce DW XPCS info structure (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_compat to dw_xpcs_compat (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Convert xpcs_id to dw_xpcs_desc (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Split up xpcs_create() body to sub-functions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Move native device ID macro to linux/pcs/pcs-xpcs.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: update err status in case different of stm32mp13 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Add test to verify if ETHCK is used before checking clk rate (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: stm32: add management of stm32mp25 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: unexport stmmac_pltfr_init/exit() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Enable TSO on VLANs (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: clean up stmmac_mac_select_pcs() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-socfpga: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-rzn1: provide select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: provide a select_pcs() implementation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: add select_pcs() platform method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: add management of stm32mp13 for stm32 (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Mask support for PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Fix Mhz to MHz (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Clean up the debug prints (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Extract PMCR configuration (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock selector (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-stm32: Separate out external clock rate validation (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwmac-intel: remove checking for fixed link (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: rename xpcs_an_inband to default_an_inband (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: ethqos: clean up setting serdes speed (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: include linux/io.h rather than asm/io.h (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove unnecessary netif_carrier_off() (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: remove pcs_rane() method (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: dwxgmac2: remove useless NULL pointer initialisations (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Drop TBI/RTBI PCS flags (Izabela Bakollari) [RHEL-100498]
  - net: stmmac: Move MAC caps init to phylink MAC caps getter (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Init RX clock early if MAC requires it (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Explicitly return error on caps validation (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Return EINVAL in the internal methods (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop redundant workqueue.h include directive (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Drop sentinel entry from 2500basex ifaces list (Izabela Bakollari) [RHEL-100498]
  - net: fill in MODULE_DESCRIPTION()s for PCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: Add 2500BASE-X case in get state for XPCS drivers (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: adapt Wangxun NICs for SGMII mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add 1000BASE-X AN interrupt support (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: support to switch mode for Wangxun NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: add specific vendor supoprt for Wangxun 10Gb NICs (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: implement pcs_disable op (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add missing put_device call in miic_create (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynxi: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: update PCS driver to use neg_mode (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Add 10GBASE-R mode for Synopsys Designware XPCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: remove xpcs_create() from public view (Izabela Bakollari) [RHEL-100498]
  - net: pcs: Drop the TSE PCS driver (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: avoid reading STAT1 more than once (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use phylink_resolve_c73() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct pause resolution (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: correct lp_advertising contents (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mii_c73_to_linkmode() helper (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: clean up reading clause 73 link partner advertisement (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix C73 AN not getting enabled (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: fix incorrect number of interfaces (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add driver for MediaTek SGMII PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: lynx: don't print an_enabled in pcs_get_state() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: remove unused struct members and use miic variable (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: remove unnecessary register definitions (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: don't set the speed for 1000BaseX (Izabela Bakollari) [RHEL-100498]
  - net: pcs: altera-tse: use read_poll_timeout to wait for reset (Izabela Bakollari) [RHEL-100498]
  - net: pcs: xpcs: use mdiodev accessors (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add new PCS driver for altera TSE PCS (Izabela Bakollari) [RHEL-100498]
  - net: pcs: rzn1-miic: update speed only if interface is changed (Izabela Bakollari) [RHEL-100498]
  - net: pcs-rzn1-miic: fix return value check in miic_probe() (Izabela Bakollari) [RHEL-100498]
  - net: pcs: add Renesas MII converter driver (Izabela Bakollari) [RHEL-100498]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-731.el9]
changelog:
  - crypto: rng - Enable pre-emption ASAP (Herbert Xu) [RHEL-92680]
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213301] {CVE-2026-64530}
  - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug (David Arcari) [RHEL-212713]
  - platform/x86/intel-uncore-freq: Rename instance_id (David Arcari) [RHEL-212713]
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open (David Arcari) [RHEL-192479]
  - platform/x86: ISST: Restore SST-PP control to all domains (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix some program return value (David Arcari) [RHEL-192479]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (David Arcari) [RHEL-192479]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Dennis Chen) [RHEL-208627]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193940]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158930]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-732.el9]
changelog:
  - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-168738]
  - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178340]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180173] {CVE-2026-46116}
  - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154906] {CVE-2026-23239}
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - xfrm: Duplicate SPI Handling (Xin Long) [RHEL-180034] {CVE-2025-39797}
  - redhat: Add DENYLIST.rhel to BPF selftests (Veronika Molnarova) [RHEL-213547]
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-190801]
  - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-190801]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-189941] {CVE-2025-68214}
  - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-213745]
  - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-113832]
  - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213155] {CVE-2026-64017}
  - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (David Arcari) [RHEL-212691]
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212684]
  - watchdog: Fix kmemleak in watchdog_cdev_register (David Arcari) [RHEL-192487]
  - watchdog: set cdev owner before adding (David Arcari) [RHEL-192487]
  - watchdog: fix watchdog may detect false positive of softlockup (David Arcari) [RHEL-192487]
  - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (David Arcari) [RHEL-192487]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147798]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147798]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147798]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147798] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147798] {CVE-2026-31759}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147798]
  - usb: add quirks for Lenovo OneLink+ Dock (Desnes Nunes) [RHEL-147798]
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147798]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147798]
  - dt-bindings: Drop remaining unneeded quotes (Desnes Nunes) [RHEL-147798]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147798]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147798]
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147798]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147798] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147798] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147798]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147798]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147798]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147798]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147798] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147798] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147798] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147798]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147798]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147798]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147798] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147798]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147798]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147798]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147798]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147798]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147798] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147798]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147798] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147798]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147798]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147798]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147798]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147798]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147798]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147798]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147798]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147798]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147798]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147798]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147798]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147798]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147798] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147798]
  - net: ethtool: Add support for 80Gbps speed (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147798]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147798]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Simplify locking with guard() (Desnes Nunes) [RHEL-147798]
  - pinctrl: tegra-xusb: Return void in padctl enable/disable functions (Desnes Nunes) [RHEL-147798]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147798]
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147798]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147798]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147798]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147798]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Desnes Nunes) [RHEL-147798]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Desnes Nunes) [RHEL-147798]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147798]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147798]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147798]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147798]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147798]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147798]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147798]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147798]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147798]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147798]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147798]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147798]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147798]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147798]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192402] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186696] {CVE-2026-46113}
  - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin queue leak on controller reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-210643]
  - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-210643]
  - nvme: fix admin request_queue lifetime (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-210643]
  - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-210643]
  - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-210643]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: Fix backward compatibility with userspace (David Marlin) [RHEL-194201]
  - Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (David Marlin) [RHEL-194201]
  - Bluetooth: fix memory leak in error path of hci_alloc_dev() (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: reject short frames before parsing (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: validate skb length in MCC handlers (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate advertising TLV before type checks (David Marlin) [RHEL-194201]
  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: fix UAF in iso_recv_frame (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (David Marlin) [RHEL-194201]
  - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading (David Marlin) [RHEL-194201]
  - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (David Marlin) [RHEL-194201]
  - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (David Marlin) [RHEL-194201]
  - Bluetooth: btusb: Allow firmware re-download when version matches (David Marlin) [RHEL-194201]
  - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (David Marlin) [RHEL-194201]
  - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (David Marlin) [RHEL-194201]
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (David Marlin) [RHEL-194201]
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (David Marlin) [RHEL-194201]
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (David Marlin) [RHEL-194201]
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (David Marlin) [RHEL-194201]
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: Fix UAF read of dev->name (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Convert timeout from jiffies to ms (David Marlin) [RHEL-194201]
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (David Marlin) [RHEL-194201]
  - Bluetooth: serialize accept_q access (David Marlin) [RHEL-194201]
  - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (David Marlin) [RHEL-194201]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-194201]
  - Revert "Reapply "Bluetooth: revert TX timestamping" for kernel v6.18.y update" (David Marlin) [RHEL-194201]
  - dpll: allow fwnode pins to attempt state change without capability bit (Michal Schmidt) [RHEL-193749]
  - dpll: extend pin notifier with notification source ID (Michal Schmidt) [RHEL-193749]
  - dpll: balance create/delete notifications in __dpll_pin_(un)register (Michal Schmidt) [RHEL-193749]
  - dpll: guard sync-pair removal on full pin unregister (Michal Schmidt) [RHEL-193749]
  - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: send delete notification before unregister in on-pin rollback (Michal Schmidt) [RHEL-193749]
  - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Michal Schmidt) [RHEL-193749]
  - dpll: allow registering FW-identified pin with a different DPLL (Michal Schmidt) [RHEL-193749]
  - dpll: add generic DPLL type (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: make frequency monitor a per-device attribute (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Michal Schmidt) [RHEL-193749]
  - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-193749]
  - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: fix memory leak on pin registration failure (Michal Schmidt) [RHEL-193749]
  - dpll: zl3073x: Use named initializers for struct i2c_device_id (Michal Schmidt) [RHEL-193749]
  - dpll: Prevent duplicate registrations (Michal Schmidt) [RHEL-193749]
  - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Michal Schmidt) [RHEL-177450]
  - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Michal Schmidt) [RHEL-177450]
  - ice: call netif_keep_dst() once when entering switchdev mode (Michal Schmidt) [RHEL-177450]
  - ice: fix ice_init_link() error return preventing probe (Michal Schmidt) [RHEL-177450]
  - ice: fix AQ error code comparison in ice_set_pauseparam() (Michal Schmidt) [RHEL-177450]
  - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Michal Schmidt) [RHEL-177450]
  - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-177450]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-177450]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-177450]
  - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-177450]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-177450]
  - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-177450]
  - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-177450]
  - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-177450]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-177450]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-177450]
  - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-177450]
  - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-177450]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-53007}
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-177450] {CVE-2026-53008}
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-177450]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-177450]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-177450] {CVE-2026-53009}
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-177450] {CVE-2026-46162}
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-177450]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-177450]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-177450]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-177450] {CVE-2026-43346}
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-177450]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-177450] {CVE-2026-23389}
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-177450]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-177450]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-177450]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-177450]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-177450]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-177450]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-177450]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-177450]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-177450]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-177450]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-177450]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-177450]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-177450]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-177450]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Nico Pache) [RHEL-189902] {CVE-2025-68211}
  - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152694]
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152694]
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152694]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152694]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154836] {CVE-2026-23240}
  - tls: don't rely on tx_work during send() (Sabrina Dubroca) [RHEL-152694]
  - tls: always set record_type in tls_process_cmsg (Sabrina Dubroca) [RHEL-152694]
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (Sabrina Dubroca) [RHEL-152694]
  - net: tls: wait for async completion on last message (Sabrina Dubroca) [RHEL-152694]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189938] {CVE-2025-40149}
  - ktls, sockmap: Fix missing uncharge operation (Sabrina Dubroca) [RHEL-152694]
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Sabrina Dubroca) [RHEL-192925]
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177879] {CVE-2026-46323}
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-178626] {CVE-2026-43503}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176061] {CVE-2026-46300}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174251]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174251]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-186601]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-186601]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-186601]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-186601]
  - neigh: let neigh_xmit take skb ownership (Florian Westphal) [RHEL-186601] {CVE-2026-52981}
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-186601]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-186601]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-186601]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-186601]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conncount: fix wrong variable type (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-186601]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-186601] {CVE-2026-31496}
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-186601]
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-186601] {CVE-2026-53270}
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-186601] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-186601] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-186601] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-186601] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-186601]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-186601] {CVE-2026-53220}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-186601] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-186601] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-186601] {CVE-2026-53269}
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-186601]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-186601]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-186601]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-186601] {CVE-2026-52912}
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-186601] {CVE-2026-52915}
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-186601]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-186601] {CVE-2026-52970}
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-186601]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-186601]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-186601]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-186601]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-186601] {CVE-2026-52986}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-186601] {CVE-2026-52920}
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-186601] {CVE-2026-46324}
  - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-186601]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-186601] {CVE-2026-52998}
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-186601] {CVE-2026-52999}
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-186601] {CVE-2026-53001}
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-186601] {CVE-2026-53002}
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-186601] {CVE-2026-45841}
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-186601]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-186601] {CVE-2026-53131}
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-186601] {CVE-2026-31665}
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-186601] {CVE-2026-31681}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-186601] {CVE-2026-43085}
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-186601] {CVE-2026-43024}
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-186601] {CVE-2026-31424}
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-186601] {CVE-2026-31418}
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-186601] {CVE-2026-43025}
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-186601] {CVE-2026-43026}
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-186601]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-186601] {CVE-2026-43028}
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-186601] {CVE-2026-31416}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-186601]
  - netfilter: Reorder fields in 'struct nf_conntrack_expect' (Florian Westphal) [RHEL-186601]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-186601] {CVE-2026-31414}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-186601]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-186601] {CVE-2026-31674}
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-186601] {CVE-2026-23278}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-186601] {CVE-2026-23351}
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-186601] {CVE-2026-23385}
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-186601]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-186601] {CVE-2025-68206}
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-186601] {CVE-2025-40206}
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-186601]
  - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-186601]
  - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-186601] {CVE-2024-56655}
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-186601] {CVE-2025-38201}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-186601] {CVE-2025-38162}
  - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-186601]
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-186601]
  - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-186601]
  - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184267]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-182043]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-182043]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-182043]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183881]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183881]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180269] {CVE-2026-43276}
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180161] {CVE-2026-46117}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180088] {CVE-2026-46145}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171507] {CVE-2026-31669}
  - tipc: fix double-free in tipc_buf_append() (Xin Long) [RHEL-152706]
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Xin Long) [RHEL-152706]
  - tipc: fix divide-by-zero in tipc_sk_filter_connect() (Xin Long) [RHEL-152706]
  - tipc: fix duplicate publication key in tipc_service_insert_publ() (Xin Long) [RHEL-152706]
  - tipc: fix RCU dereference race in tipc_aead_users_dec() (Xin Long) [RHEL-152706]
  - tipc: use kfree_sensitive() for session key material (Xin Long) [RHEL-152706]
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Xin Long) [RHEL-152706]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152695]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152695]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152695]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152695]
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Xin Long) [RHEL-152695]
  - sctp: Hold sock lock while iterating over address list (Xin Long) [RHEL-152695]
  - sctp: Prevent TOCTOU out-of-bounds write (Xin Long) [RHEL-152695]
  - sctp: Hold RCU read lock while iterating over address list (Xin Long) [RHEL-152695]
  - net: sctp: fix KMSAN uninit-value in sctp_inq_pop (Xin Long) [RHEL-152695]
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Xin Long) [RHEL-152695]
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Xin Long) [RHEL-152695]
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141217] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141217]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix kernel-doc issues in mpi3mr_app.c (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141218] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141218]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141218]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-733.el9]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219617] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-212990]
  - drm/i915/display: enable ccs modifiers on dg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Anusha Srivatsa) [RHEL-180329]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Clear pending_disable before signaling suspend fence (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/display: fix oops in suspend/shutdown without display (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: reject DMA commands with uninitialized length (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix arithmetic issues in dma_length() (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Anusha Srivatsa) [RHEL-180329]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds checks for firmware log indices (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Add bounds check for firmware runtime memory (Anusha Srivatsa) [RHEL-180329]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: track individual colorop updates (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Remove read-only comments from interpolation fields (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Fix driver removal with disabled KMS (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/edp: Check supported link rates DPCD read (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: Fix potential UAF in TTM object purge (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: fix race between change_handle and handle_delete (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate VMBus packet size in receive callback (Anusha Srivatsa) [RHEL-180329]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Anusha Srivatsa) [RHEL-180329]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Read Intel DPCD workaround register (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/aux: use polling when irqs are unavailable (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/pf: Fix CFI failure in debugfs access (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/vf: Fix signature of print functions (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Make the GEM LRU lock part of drm_device (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: megachips: remove bridge when irq request fails (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: it66121: acquire reset GPIO in probe (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/multi_queue: Fix secondary queue error case (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: use uninterruptible resv lock for plane updates (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Anusha Srivatsa) [RHEL-180329]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-180329]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Anusha Srivatsa) [RHEL-180329]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Anusha Srivatsa) [RHEL-180329]
  - drm: Replace old pointer to new idr (Anusha Srivatsa) [RHEL-180329]
  - drm/loongson: Use managed KMS polling (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xelp: Fix Wa_18022495364 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Allow embedded connectors without DDC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Anusha Srivatsa) [RHEL-180329]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Anusha Srivatsa) [RHEL-180329]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/wm: Verify the correct plane DDB entry (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Anusha Srivatsa) [RHEL-180329]
  - drm/fb-helper: Fix a locking bug in an error path (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add default case in DVI mode validation (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Update queue properties for metadata ring (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: Fix xgmi max speed reporting (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/ras: Fix type size of remainder argument (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Removed commented line for MQD queue priority (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Anusha Srivatsa) [RHEL-180329]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Anusha Srivatsa) [RHEL-180329]
  - dma-fence: Fix sparse warnings due __rcu annotations (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/pm: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Anusha Srivatsa) [RHEL-180329]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: zero-initialize GART table on allocation (Anusha Srivatsa) [RHEL-180329]
  - drm/radeon: add missing revision check for CI (Anusha Srivatsa) [RHEL-180329]
  - drm: Set old handle to NULL before prime swap in change_handle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Anusha Srivatsa) [RHEL-180329]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-180329]
  - drm/udl: Increase GET_URB_TIMEOUT (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Anusha Srivatsa) [RHEL-180329]
  - drm/appletbdrm: Use kvzalloc for big allocations (Anusha Srivatsa) [RHEL-180329]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vce: Prevent partial address patches (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Anusha Srivatsa) [RHEL-180329]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Anusha Srivatsa) [RHEL-180329]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Anusha Srivatsa) [RHEL-180329]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Anusha Srivatsa) [RHEL-180329]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Anusha Srivatsa) [RHEL-180329]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Anusha Srivatsa) [RHEL-180329]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Anusha Srivatsa) [RHEL-180329]
  - drm/atomic: Add affected colorops with affected planes (Anusha Srivatsa) [RHEL-180329]
  - drm/colorop: Preserve bypass value in duplicate_state() (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Anusha Srivatsa) [RHEL-180329]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Anusha Srivatsa) [RHEL-180329]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Anusha Srivatsa) [RHEL-180329]
  - drm/imagination: Fix segfault when updating ftrace mask (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Anusha Srivatsa) [RHEL-180329]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Anusha Srivatsa) [RHEL-180329]
  - drm/arcpgu: fix device node leak (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Anusha Srivatsa) [RHEL-180329]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Anusha Srivatsa) [RHEL-180329]
  - drm/amdgpu: replace PASID IDR with XArray (Anusha Srivatsa) [RHEL-180329]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-734.el9]
changelog:
  - redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-216926]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-216926]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-216926]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-216926]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-216926]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-216926]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-216926]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-216926]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-216926]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-216926]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-216926]
  - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-216926]
  - smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-216926]
  - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-216926]
  - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-216926]
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-216926]
  - smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-216926]
  - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-216926]
  - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-216926]
  - cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-216926]
  - smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-216926]
  - smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-216926]
  - smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-216926]
  - smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-216926]
  - smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-216926]
  - cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-216926]
  - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-216926]
  - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-216926]
  - smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-216926]
  - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-216926]
  - smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-216926]
  - smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-216926]
  - smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-216926]
  - smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-216926]
  - smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-216926]
  - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-216926]
  - cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-216926]
  - smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-216926]
  - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-216926]
  - smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-216926]
  - smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-216926]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-216926]
  - smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-216926]
  - cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-216926]
  - smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-216926]
  - smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-216926]
  - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-216926]
  - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-216926]
  - smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-216926]
  - smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-216926]
  - smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-216926]
  - smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-216926]
  - smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-216926]
  - smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-216926]
  - smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-216926]
  - vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-216926]
  - smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-216926]
  - smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-216926]
  - vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-216926]
  - smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-216926]
  - smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-216926]
  - smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-216926]
  - smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-216926]
  - smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-216926]
  - smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-216926]
  - smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-216926]
  - smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-216926]
  - fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-216926]
  - smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-216926]
  - cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-216926]
  - smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-216926]
  - smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-216926]
  - smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-216926]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-216926]
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-216926]
  - smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-216926]
  - smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-216926]
  - smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-216926]
  - smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-216926]
  - smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-216926]
  - smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-216926]
  - smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-216926]
  - smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-216926]
  - smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-216926]
  - cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-216926]
  - smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-216926]
  - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-216926]
  - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-216926]
  - cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-216926]
  - cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-216926]
  - cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-216926]
  - cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-216926]
  - smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-216926]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-216926]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207773]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207773]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213219] {CVE-2026-63888}
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212062]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-193816]
  - ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-193816]
  - ice: implement CPI support for E825C (Michal Schmidt) [RHEL-193816]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-193816]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193044]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188795] {CVE-2025-54518}
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223629]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-735.el9]
changelog:
  - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222498] {CVE-2026-64531}
  - hung_task: explicitly report I/O wait state in log output (Luiz Capitulino) [RHEL-146503]
  - hung_task: ignore hung_task_warnings when hung_task_panic is enabled (Luiz Capitulino) [RHEL-146503]
  - hung_task: print message when hung_task_warnings gets down to zero. (Luiz Capitulino) [RHEL-146503]
  - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-212733]
  - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-212733]
  - wifi: nl80211: re-check wiphy netns in testmode and vendor dump continuations (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - dt-bindings: wireless: ath10k: Add quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: fix typo rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: fix resource leak in probe error path (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: correct drop logic for malformed AMPDU frames (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtl818x: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath6kl: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath6kl: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: enforce HE/EHT cap/oper consistency (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: fix leak if split 6 GHz scanning fails (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: avoid oversized UATS command copy (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: send tx power constraints before link activation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: wext: validate chandef in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: consume only present negotiated TTLM maps (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: wilc1000: fix dma_buffer leak on bus acquire failure (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: don't override max_amsdu_subframes (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: clear shared SRNG pointer state on restart (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix peer resolution on rx path when peer_id=0 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: disconnect only after 6 beacons without Rx (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o BSS vif (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: use correct function to read STEP_URM register (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: stop TX during firmware restart (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath10k: skip WMI and beacon transmission when device is wedged (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix error path leaks in some WMI calls (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix error path leaks in some WMI WOW calls (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: re-check wiphy netns in nl80211_prepare_wdev_dump() continuation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: require CAP_NET_ADMIN over the target netns in SET_WIPHY_NETNS (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: fix NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST usage (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: initialize RSSI dBm conversion event state (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: fix leak in some ath12k_wmi_xxx() functions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: tests: mark HT check strict (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: require admin perm on SET_PMK / DEL_PMK (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Jose Ignacio Tornos Martinez) [RHEL-186475] {CVE-2026-46180}
  - wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: use lockdep_assert_in_rcu_read_lock() for RCU assertions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: fix OF node refcount imbalance in WSI graph traversal (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - net: use get_random_u{16,32,64}() where appropriate [wireless] (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: Explicitly include <linux/export.h> in michael-mic.c (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath10k: Add device-tree quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211, cfg80211: Export michael_mic() and move it to cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Enable IPQ5424 WiFi device support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Add CE remap hardware parameters for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: add ath12k_hw_regs for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: add ath12k_hw_version_map entry for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Add ath12k_hw_params for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Create symlink for each radio in a wiphy (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Skip adding inactive partner vdev info (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Support channel change stats (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Rename hw_link_id to radio_idx in ath12k_ah_to_ar() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: enable MLO support for 4-address mode interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: use ap_addr for 4-address NULL frame destination (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: synchronize valid links for WDS AP_VLAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: remove unused variables in minstrel_ht_alloc_sta (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: brcmfmac: silence warning for non-existent, optional firmware (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: wilc1000: use kzalloc_flex (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: brcmfmac: of: defer probe for MAC address (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: brcmfmac: Fix error pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: allow add_key on NAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: report and drop spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: allow block ack agreements in NAN Data (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Accept frames on NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: add support for TX over NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: update NAN data path state on schedule changes (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: add NAN peer schedule support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: support NAN stations (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: handle reconfig for NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: support open and close for NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: add NAN local schedule support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: run NAN DE code only when appropriate (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: export ieee80211_calculate_rx_timestamp (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ieee80211: add more NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: add a TXQ for management frames on NAN devices (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: usb: fix TX flow control by tracking in-flight URBs (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Add support for Elecom WDC-XE2402TU3-B (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add PCI ID of RTL8922DE and RTL8922DE-VS (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add chip_info and chip_ops struct (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add ops related to BT coexistence mechanism (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add RF ops of init hardware and get thermal (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: configure TX/RX path assisting in BT coexistence (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add set TX power callback (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add RF calibration ops (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add set channel with pre-/post- helpers (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: BB hardware pre-/post-init, TX/RX path and power settings (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: fix typo "frome" -> "from" in rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: coex: Ignore BT info byte 5 from RTL8821A (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: fw: load TX power elements according to AID (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: phy: load RF parameters relying on ACV for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: phy: expand PHY page for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: mac: disable pre-load function for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: mac: add specific case to dump mac memory for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: pci: clear SER ISR when initial and leaving WoWLAN for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: wow: enable MLD address for Magic packet wakeup (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: wow: use struct style to fill WOW wakeup control H2C command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add set channel of RF part (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add set channel of BB part (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add set channel of MAC part (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: read and configure RF by calibration data from efuse physical map (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: define efuse map and read necessary fields (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add power on/off functions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8922d: add definition of quota, registers and efuse block (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: validate RX rate to prevent out-of-bound (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Add support for Buffalo WI-U3-2400XE2 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Add support for TP-Link Archer TX50U (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: retry efuse physical map dump on transient failure (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: TX QOS Null data the same way as Null data (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: add quirks to disable PCI ASPM and deep LPS for HP P3S95EA#ACB (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - net: qrtr: fix endian handling of confirm_rx field (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: ignore reserved bits in reconfiguration status (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: allow protected action frame TX for NAN (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ieee80211: Add some missing NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: Add a notification to notify NAN channel evacuation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: add NL80211_CMD_NAN_ULW_UPDATE notification (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: allow reporting spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: allow ToDS=0/FromDS=0 data frames on NAN data interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: define an API for configuring the NAN peer's schedule (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: add support for NAN stations (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: separately store HT, VHT and HE capabilities for NAN (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: add support for NAN data interface (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: make sure NAN chandefs are valid (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: Add an API to configure local NAN schedule (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: cleanup error path of ieee80211_do_open (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: extract channel logic from link logic (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: set RX_FLAG_RADIOTAP_TLV_AT_END generically (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: reduce the number of prints upon firmware crash (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: fix the description of SESSION_PROTECTION_CMD (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: introduce iwl_mld_vif_fw_id_valid (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: block EMLSR during TDLS connections (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: TLC_MNG_CONFIG_CMD can use several structures (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: update the TLC when we deactivate a link (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: add a macro for max FW links (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: always assign a fw id to a vif (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: use the dedicated helper to extract a link (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: add MAC context command version 4 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: handle NULL/ERR returns from ptp_clock_register() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: add double-include guards to nan.h (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: make alloc functions not forced static (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: rename iwl_mld_phy_from_mac80211() argument (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: remove type argument from iwl_mld_add_sta() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: make iwl_mld_mac80211_iftype_to_fw() static (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: pcie: don't dump on reset handshake in dump (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: use IWL_FW_CHECK for sync timeout (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: add BIOS revision compatibility check for PPAG command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: validate the channels received in iwl_mcc_update_resp_v* (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: add CQM event support for per-link RSSI changes (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: eliminate duplicate WIDE_ID in PPAG command handling (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: fw: Add TLV support for BIOS revision of command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: support changing iftype at runtime (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: set UHR MCS in RX status (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: enable UHR in TLC (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: remove SCAN_TIMEOUT_MSEC (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: remove IWL_MAX_WD_TIMEOUT (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: mode the comments valid kerneldoc comments (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: support PER_CHAIN_LIMIT_OFFSET_CMD v6 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: add support for WGDS revision 4 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: validate the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: add support for WGDS rev4 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: open code the parsing of the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: support version 11 of REDUCE_TX_POWER_CMD (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: add support for EWRD rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: add support for WRDS rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: support the new WRDS and EWRD tables (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: zero iwl_geo_tx_power_profiles_cmd before sending (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: restrict TOP reset to some devices (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: add support for PPAG table rev5 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: add support for PPAG rev5 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: check the size of the ACPI PPAG tables (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: regulatory: support a new command for PPAG (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: add support for sta command version 3 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: bring iwl_fill_ppag_table to the iwlmvm (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: open code the PPAG table store operation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: Introduce scan command version 18 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: Refactor scan command handling (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: remove unused scan expire time constants (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: cleanup some more MLO code (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: acpi: better use ARRAY_SIZE than a define (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: uefi: decouple UEFI and firmware APIs (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: ensure we don't read SAR values past the limit (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mld: add support for iwl_mcc_allowed_ap_type_cmd v2 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: mvm: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: fw: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: iwlwifi: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Destroy active sta links in mt7996_mac_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Add mcu APIs to enable/disable vif links. (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Destroy vif active links in mt7996_remove_interface() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Move mlink deallocation in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Account active links in valid_links fields (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Rely on msta_link link_id in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix frequency separation for station STR mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: host-only unwind published links on add failure (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: publish msta->link after successful link add (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: switch link STA allocation to RCU lifetime (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: move WCID teardown into link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: drop WCID reinit after publish (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: unwind WCID setup on link STA add failure (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: make WCID cleanup unconditional in sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mconf and mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: resolve link after acquiring mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to set_link_key() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: validate mlink in sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to mac_link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: resolve primary mlink via def_wcid (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to mcu_sta_update() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink and mconf to sta_mld_tlv() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass WCID indices to bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: pass mlink to sta_amsdu_tlv() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix issues with manually triggered radar detection (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: adjust timeout value for boot-up calibration commands (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: update WFSYS reset flow for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: support critical packet mode for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: add per-link beacon monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: wait for firmware TX completion of mgmt frames before channel switch (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: route nullfunc frames to PSD/ALTX queue (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: flush pending TX before channel switch (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: send nullfunc PS frames on offchannel transitions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: optimize ROC for same-channel case (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: abort ROC on chanctx changes (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: check chanctx before restoring channel after ROC (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: add offchannel check to mt76_roc_complete (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: support upgrading passive scans to active (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: fix multi-radio on-channel scanning (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Decrement sta counter removing the link in mt7996_mac_reset_sta_iter() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Remove unnecessary phy filed in mt7996_vif_link struct (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Remove link pointer dependency in mt7996_mac_sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: add missing lock protection in mt76_sta_state for sta_event callback (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: fix 6GHz regulatory update on connection (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Disable Rx hdr_trans in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Add eMLSR support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: don't return TXQ when exceeding max non-AQL packets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix queue pause after scan due to wrong channel switch reason (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: avoid to set ACK for MCU command if wait_resp is not set (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: add MT7902 SDIO device support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: add MT7902 PCIe device support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: add MT7902 WFDMA prefetch configuration (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: add MT7902 MCU support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: ensure MCU ready before ROM patch download (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: add PSE handling barrier for the large MCU cmd (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: connac: mark MT7902 as hw txp devices (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: add MT7902e DMA layout support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: handle MT7902 irq_map quirk with mutable copy (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: use mt76_for_each_q_rx() in reset path (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: connac: use is_connac2() to replace is_mt7921() checks (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: apply calibration-free data from OTP (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: add variant for MT7992 chipsets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: add external EEPROM support for mt799x chipsets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: don't consider the sband when processing capabilities (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: properly handle error in ieee80211_add_virtual_monitor (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: support UNII-9 channels in ieee80211_channel_to_freq_khz (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: make ieee80211_find_chanctx link-unaware (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211_hwsim: advertise basic UHR support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: use for_each_chanctx_user_* in one more place (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: Add support for additional 7 GHz channels (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Replace strncpy() with strscpy_pad() in drv_switch_vif_chanctx tracepoint (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: fix backoff fields and max_power calculation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: Replace deprecated PCI function (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: increase txq memory limit to 32 MiB (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: reset device after MCU message timeout (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: fix deadlock in remain-on-channel (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: fix tx power setting failure after chip reset (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: Skip scan process during suspend. (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: drop puncturing handling from BSS change path (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: Fix memory leak destroying device (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow (Jose Ignacio Tornos Martinez) [RHEL-186475] {CVE-2026-46136}
  - wifi: mt76: mt7921: Place upper limit on station AID (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: fix list corruption in mt76_wcid_cleanup (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: fix incorrect length field in txpower command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: add support for ERP CTS & HT protection (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7915: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7615: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt7601u: check multiple firmware paths (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt792x: Fix a potential deadlock in high-load situations (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Reset ampdu_state state in case of failure in mt7996_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Switch to the secondary link if the default one is removed (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: Set mtxq->wcid just for primary link (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: introduce CSA support in non-MLO mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt76x02: wake queues after reconfig (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix iface combination for different chipsets (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: add duplicated WTBL command (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: offload radar threshold initialization (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: abort CCA when CSA is starting (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: set specific BSSINFO and STAREC commands after channel switch (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: fix the behavior of radar detection (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7996: extend CSA and CCA support for MLO (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: use int for band coming from netlink (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: fix STA link removal during link removal (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: usb: Rx aggregation for RTL8832CU/RTL8851BU (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Remove unused DFS Unit Test definitions (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Clean up the WMI Unit Test command interface (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: debug: simulate Wi-Fi 7 SER L0/L1 without PS mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Recalculate station aggregates when AMSDU length changes for MLO links (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Drop malformed AMPDU frames with abnormal PN (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: replace RF mutex with wiphy lock assertion (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: wow: add retry for ensuring packet are processed (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: chan: recalc MLO DBCC mode based on current entity mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: chan: simplify link handling related to ROC (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: tweak settings of TX power and channel for Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: move disabling dynamic mechanism functions to core (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: phy: limit AMPDU number for RA try rate (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: mac: remove A-die off setting for RTL8852C and RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: pci: update SER parameters for suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtlwifi: rtl8192d: fix typo in H2C wait counter names (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtlwifi: usb: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: fix device leak on probe failure (Jose Ignacio Tornos Martinez) [RHEL-186475] {CVE-2026-31604}
  - wifi: rtl8xxxu: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtl8xxxu: fix potential use of uninitialized value (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtl8xxxu: Mark RTL8188ETV (0bda:0179) as tested (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: reject S1G/60G with HT chantype (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ieee80211: fix definition of EHT-MCS 15 in MRU (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: check non-S1G width with S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: restrict cfg80211_chandef_create() to only HT-based bands (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: don't use cfg80211_chandef_create() for default chandef (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Remove deleted sta links in ieee80211_ml_reconf_work() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: split control freq check from chandef check (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: always use full chanctx compatible check (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: refactor chandef tracing macros (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: validate HE 6 GHz operation when EHT is used (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: split out UHR operation information (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Use .mbn firmware for AHB devices (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath10k: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath10k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath9k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Fix legacy rate mapping for monitor mode capture (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Fix the assignment of logical link index (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: account TX stats only when ACK/BA status is present (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mwifiex: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rt2x00: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211_hwsim: add incumbent signal interference detection support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: Add SPDX ids to some files in the wireless subsystem (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: add support for NDP ADDBA/DELBA for S1G (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ieee80211: fix UHR operation DBE vs. P-EDCA order (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: remove AID bit stripping for print (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: remove stale TODO item (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: move action code from per-type frame structs (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: UHR: define DPS/DBE/P-EDCA elements and fix size parsing (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211_hwsim: change hwsim_class to a const struct (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: give the AP more time for EPPKE as well (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: check for PCI upstream bridge existence (Jose Ignacio Tornos Martinez) [RHEL-186475] {CVE-2026-46092}
  - wifi: rtw89: ser: post-recover DMAC state to prevent LPS (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: ser: Wi-Fi 7 reset HALT C2H after reading it (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: debug: add SER SW counters to count simulation (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: rfk: add hardware version to rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: add H2C command to protect TX/RX for unused PHY (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8851b: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8852a: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8852a: move DIG tables to rtw8852a.c (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: 8852b: update supported firmware format to 2 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: add general way to generate module firmware string (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: fw: recognize firmware type B by AID (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: fw: add fw_def struct to put firmware name and format version (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw88: coex: Solve LE-HID lag & update coex version to 26020420 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rtw89: Turbo mode for RTL8851BU/RTL8852BU (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Remove the unused argument from the Rx data path (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Enable monitor mode support on IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: Set up MLO after SSR (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: Silence remoteproc probe deferral prints (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: support key installation on non-netdev wdevs (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: make cluster id an array (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: update outdated comment (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Advertise IEEE 802.1X authentication support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Add support for IEEE 802.1X authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: add support for IEEE 802.1X Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Advertise EPPKE support based on driver capabilities (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211_hwsim: Advertise support for (Re)Association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Fix AAD/Nonce computation for management frames with MLO (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: rt2x00: use generic nvmem_cell_get (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: fetch unsolicited probe response template by link ID (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: fetch FILS discovery template by link ID (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: don't allow DFS channels for NAN (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: refactor wiphy_suspend (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211/cfg80211: support stations of non-netdev interfaces (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: remove unneeded call to cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: nl80211: refactor nl80211_parse_chandef (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: add support to handle incumbent signal detected event from mac80211/driver (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: Set link ID for NULL packets sent to probe stations (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mac80211: set band information only for non-MLD when probing stations using NULL frame (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-186475] {CVE-2026-46069}
  - wifi: mac80211_hwsim: background CAC support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: events, report background radar (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: set and report chandef CAC ongoing (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: cfg80211: fix background CAC (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath11k: fix memory leaks in beacon template setup (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: add basic hwmon temperature reporting (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath12k: fix indentation in ath12k_qmi_aux_uc_load() (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: ath9k: Fix typo (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: disable auto regd changes after user set (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: add auto regdomain switch support (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: improve EHT capability control in regulatory flow (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: refactor regulatory notifier flow (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: refactor CLC support check flow (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: refactor regulatory domain handling to regd.[ch] (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - wifi: mt76: mt7925: add rfkill_poll for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-186475]
  - bus: mhi: host: pci_generic: Add Telit FE912C04 modem support (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: ep: Test for non-zero return value where applicable (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: host: pci_generic: Add pm_runtime_forbid() in remove callback (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: host: pci_generic: Add NMEA channels to FN920C04 and FN990A (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: host: pci_generic: Enable IP_SW and IP_ETH channels for Qcom QDU100 device (Jose Ignacio Tornos Martinez) [RHEL-186474]
  - bus: mhi: host: pci_generic: Add Qualcomm SDX35 modem (Jose Ignacio Tornos Martinez) [RHEL-186474]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-736.el9]
changelog:
  - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222801]
  - i2c: core: fix adapter deregistration race (David Arcari) [RHEL-222902] {CVE-2026-64279}
  - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183626] {CVE-2025-10263}
  - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (David Arcari) [RHEL-217011]
  - pinctrl-amd: Don't clear S4 wake bits at probe (David Arcari) [RHEL-211144]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (David Arcari) [RHEL-216442]
  - fs/resctrl: Fix use-after-free during unmount (David Arcari) [RHEL-216442]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (David Arcari) [RHEL-216442]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (David Arcari) [RHEL-216442]
  - kernfs: fix suspicious RCU usage in kernfs_put() (David Arcari) [RHEL-216442]
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213339] {CVE-2026-63807}
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213339]
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213339]
  - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213339]
  - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-213339]
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211279] {CVE-2025-40026}
  - perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: nvidia: Add revision id matching (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add pmpidr support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add callback to reset filter config (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Add PMEVFILT2R support (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Fix missing io.h include (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Generalise event filtering (Charles Mirabile) [RHEL-121676]
  - perf/arm_cspmu: Move register definitons to header (Charles Mirabile) [RHEL-121676]
  - fixup! Merge: s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-191803]
  - redhat/configs: Enable Epson RX8111 RTC driver (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: Adapt upstream driver for kernel 5.14 (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: handle VLOW flag (Nirmala Dalvi) [RHEL-184760]
  - rtc: rx8111: demote warnings to debug level (Nirmala Dalvi) [RHEL-184760]
  - rtc: Add driver for Epson RX8111 (Nirmala Dalvi) [RHEL-184760]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188213] {CVE-2026-52923}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-737.el9]
changelog:
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-222675]
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224537]
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure (David Arcari) [RHEL-212721]
  - thermal: intel: int340x: Fix potential shift overflow in ptc_mmio_write() (David Arcari) [RHEL-212721]
  - bnxt_en: Fix NULL pointer dereference (CKI Backport Bot) [RHEL-185084]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-738.el9]
changelog:
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224339]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224339]
  - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231655] {CVE-2026-63886}
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231655] {CVE-2026-63886}
  - platform/x86/intel/tpmi/plr: Prevent fault during unbind (Dennis Chen) [RHEL-212707]
  - platform/x86: intel: Add notifiers support (Dennis Chen) [RHEL-212707]
  - x86/fpu: Ensure XFD state on signal delivery (Dennis Chen) [RHEL-212652]
  - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Dennis Chen) [RHEL-212719]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193254]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193254]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193254]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193254]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193254]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193254]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193254]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193254]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193254]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193254]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193254]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193254]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193254]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193254]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193254]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193254]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193254]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193254]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193254]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193254]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193254]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193254]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193254]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193254]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193254]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193254]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193254]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193254]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193254] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193254]
  - KVM: s390: Fall back to short-term pinning in MAP ioctl (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Introducing kvm_arch_set_irq_inatomic fast inject (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Enable adapter_indicators_set to use mapped pages (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: Add map/unmap ioctl and clean mappings post-guest (Christoph Schlameuss) [RHEL-136457]
  - KVM: s390: get rid of gmap_translate() (Christoph Schlameuss) [RHEL-136457]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-150728]
  - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-150728]
  - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-150728]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-150728] {CVE-2026-43084}
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-150728]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-150728]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Luis Claudio R. Goncalves) [RHEL-186591]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188519] {CVE-2026-53000}
  - kernel.spec.template: add tcp_ao kselftests (Davide Caratti) [RHEL-142637]
  - Kconfig: enable CONFIG_TCP_AO (Davide Caratti) [RHEL-142637]
  - tcp: Decrement tcp_md5_needed static branch (Davide Caratti) [RHEL-142637]
  - net/tcp-ao: fix use-after-free of key in del_async path (Davide Caratti) [RHEL-142637]
  - sockptr: fix usize check in copy_struct_from_sockptr() for user pointers (Davide Caratti) [RHEL-142637]
  - tcp: defer md5sig_info kfree past RCU grace period in tcp_connect (Davide Caratti) [RHEL-142637]
  - tcp: restore RCU grace period in tcp_ao_destroy_sock (Davide Caratti) [RHEL-142637]
  - selftests/net: Synchronize client/server before counters checks (Davide Caratti) [RHEL-142637]
  - selftests/net: Fix various spelling mistakes in TCP-AO tests (Davide Caratti) [RHEL-142637]
  - tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Printing fixes to confirm with format-security (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Fix fscanf() call for format-security (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Zero-init tcp_ao_info_opt (Davide Caratti) [RHEL-142637]
  - selftests/net: Amend per-netns counter checks (Davide Caratti) [RHEL-142637]
  - selftests/tcp_ao: Make RST tests less flaky (Davide Caratti) [RHEL-142637]
  - selftests/net: Repair RST passive reset selftest (Davide Caratti) [RHEL-142637]
  - tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO. (Davide Caratti) [RHEL-142637]
  - tcp: Don't access uninit tcp_rsk(req)->ao_keyid in tcp_create_openreq_child(). (Davide Caratti) [RHEL-142637]
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Davide Caratti) [RHEL-142637] {CVE-2025-39852}
  - selftests/net: Rectify key counters checks (Davide Caratti) [RHEL-142637]
  - selftests/net: Argument value mismatch when calling verify_counters() (Davide Caratti) [RHEL-142637]
  - selftests: tcp_ao: set the timeout to 2 minutes (Davide Caratti) [RHEL-142637]
  - selftests: tcp_ao: add a config file (Davide Caratti) [RHEL-142637]
  - selftests/net/tcp-ao: Use LDLIBS instead of LDFLAGS (Davide Caratti) [RHEL-142637]
  - net/tcp_sigpool: Use kref_get_unless_zero() (Davide Caratti) [RHEL-142637]
  - selftest/tcp-ao: Rectify out-of-tree build (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO key-management test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO selfconnect/simultaneous connect test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO RST test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add SEQ number extension test (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP_REPAIR TCP-AO tests (Davide Caratti) [RHEL-142637]
  - selftests/net: Add test/benchmark for removing MKTs (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO + TCP-MD5 + no sign listen socket tests (Davide Caratti) [RHEL-142637]
  - selftests/net: Add test for TCP-AO add setsockopt() command (Davide Caratti) [RHEL-142637]
  - selftests/net: Add a test for TCP-AO keys matching (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO ICMPs accept test (Davide Caratti) [RHEL-142637]
  - selftests/net: Verify that TCP-AO complies with ignoring ICMPs (Davide Caratti) [RHEL-142637]
  - selftests/net: Add TCP-AO library (Davide Caratti) [RHEL-142637]
  - net/tcp-ao: Fix MAC comparison to be constant-time (Davide Caratti) [RHEL-142637] {CVE-2026-43384}
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Davide Caratti) [RHEL-142637] {CVE-2025-39950}
  - tcp: Free TCP-AO/TCP-MD5 info/keys without RCU (Davide Caratti) [RHEL-142637]
  - tcp: Destroy TCP-AO, TCP-MD5 keys in .sk_destruct() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals (Davide Caratti) [RHEL-142637]
  - net/tcp: Disable TCP-AO static key after RCU grace period (Davide Caratti) [RHEL-142637] {CVE-2024-43887}
  - net/tcp_ao: Don't leak ao_info on error-path (Davide Caratti) [RHEL-142637] {CVE-2024-40985}
  - Documentation/tcp-ao: Add a few lines on tracepoints (Davide Caratti) [RHEL-142637]
  - net/tcp: Remove tcp_hash_fail() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp-md5 and tcp-ao tracepoints (Davide Caratti) [RHEL-142637]
  - net/tcp: Move tcp_inbound_hash() from headers (Davide Caratti) [RHEL-142637]
  - net/tcp: Add a helper tcp_ao_hdr_maclen() (Davide Caratti) [RHEL-142637]
  - net/tcp: Use static_branch_tcp_{md5,ao} to drop ifdefs (Davide Caratti) [RHEL-142637]
  - net/tcp: Only produce AO/MD5 logs if there are any keys (Davide Caratti) [RHEL-142637]
  - tcp: Move TCP-AO bits from cookie_v[46]_check() to tcp_ao_syncookie(). (Davide Caratti) [RHEL-142637]
  - tcp: Cache sock_net(sk) in cookie_v[46]_check(). (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED (Davide Caratti) [RHEL-142637]
  - tcp: Fix Use-After-Free in tcp_ao_connect_init (Davide Caratti) [RHEL-142637] {CVE-2024-27394}
  - net: tcp: remove call to obsolete crypto_ahash_alignmask() (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't store TCP-AO maclen on reqsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Don't add key with non-matching VRF on connected sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Limit TCP_AO_REPAIR to non-listen sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Consistently align TCP-AO option in the header (Davide Caratti) [RHEL-142637]
  - tcp: Fix SYN option room calculation for TCP-AO. (Davide Caratti) [RHEL-142637]
  - Documentation/tcp: Fix an obvious typo (Davide Caratti) [RHEL-142637]
  - tcp: Fix -Wc23-extensions in tcp_options_write() (Davide Caratti) [RHEL-142637]
  - net/tcp_sigpool: Fix some off by one bugs (Davide Caratti) [RHEL-142637]
  - net/tcp: fix possible out-of-bounds reads in tcp_hash_fail() (Davide Caratti) [RHEL-142637]
  - Documentation/tcp: Add TCP-AO documentation (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP_AO_REPAIR (Davide Caratti) [RHEL-142637]
  - net/tcp: Wire up l3index to TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Add static_key for TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Allow asynchronous delete for TCP-AO keys (MKTs) (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO getsockopt()s (Davide Caratti) [RHEL-142637]
  - net/tcp: Add option for TCP-AO to (not) hash header (Davide Caratti) [RHEL-142637]
  - net/tcp: Ignore specific ICMPs for TCP-AO connections (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp_hash_fail() ratelimited logs (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO SNE support (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO segments counters (Davide Caratti) [RHEL-142637]
  - net/tcp: Verify inbound TCP-AO signed segments (Davide Caratti) [RHEL-142637]
  - net/tcp: Sign SYN-ACK segments with TCP-AO (Davide Caratti) [RHEL-142637]
  - net/tcp: Wire TCP-AO to request sockets (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO sign to twsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Add AO sign to RST packets (Davide Caratti) [RHEL-142637]
  - net/tcp: Add tcp_parse_auth_options() (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO sign to outgoing packets (Davide Caratti) [RHEL-142637]
  - net/tcp: Calculate TCP-AO traffic keys (Davide Caratti) [RHEL-142637]
  - net/tcp: Prevent TCP-MD5 with TCP-AO being set (Davide Caratti) [RHEL-142637]
  - net/tcp: Introduce TCP_AO setsockopt()s (Davide Caratti) [RHEL-142637]
  - net/tcp: Add TCP-AO config and structures (Davide Caratti) [RHEL-142637]
  - net/tcp: Prepare tcp_md5sig_pool for TCP-AO (Davide Caratti) [RHEL-142637]
  - tcp: Update stale comment for MD5 in tcp_parse_options(). (Davide Caratti) [RHEL-142637]
  - tcp: Disable header prediction for MD5 flow. (Davide Caratti) [RHEL-142637]
  - tcp: use 2-arg optimal variant of kfree_rcu() (Davide Caratti) [RHEL-142637]
  - net/tcp: Separate initialization of twsk (Davide Caratti) [RHEL-142637]
  - net/tcp: Do cleanup on tcp_md5_key_copy() failure (Davide Caratti) [RHEL-142637]
  - net/tcp: Disable TCP-MD5 static key on tcp_md5sig_info destruction (Davide Caratti) [RHEL-142637]
  - net/tcp: Separate tcp_md5sig_info allocation into tcp_md5sig_info_add() (Davide Caratti) [RHEL-142637]
  - tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 (Davide Caratti) [RHEL-142637]
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Davide Caratti) [RHEL-142637]
  - crypto: cipher - On clone do crypto_mod_get() (Davide Caratti) [RHEL-142637]
  - crypto: api - Add __crypto_alloc_tfmgfp (Davide Caratti) [RHEL-142637]
  - crypto: cmac - Add support for cloning (Davide Caratti) [RHEL-142637]
  - crypto: cipher - Add crypto_clone_cipher (Davide Caratti) [RHEL-142637]
  - crypto: cmac - Use modern init_tfm/exit_tfm (Davide Caratti) [RHEL-142637]
  - crypto: shash - Allow cloning on algorithms with no init_tfm (Davide Caratti) [RHEL-142637]
  - crypto: cryptd - Add support for cloning hashes (Davide Caratti) [RHEL-142637]
  - crypto: cryptd - Convert hash to use modern init_tfm/exit_tfm (Davide Caratti) [RHEL-142637]
  - crypto: hmac - Add support for cloning (Davide Caratti) [RHEL-142637]
  - crypto: hash - Add crypto_clone_ahash/shash (Davide Caratti) [RHEL-142637]
  - crypto: api - Add crypto_clone_tfm (Davide Caratti) [RHEL-142637]
  - crypto: api - Add crypto_tfm_get (Davide Caratti) [RHEL-142637]
  - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (Petr Oros) [RHEL-155154]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-739.el9]
changelog:
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios (Aristeu Rozanski) [RHEL-153668]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227838] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227838] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227838]
  - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227838]
  - posix-cpu-timers: Implement the missing timer_wait_running callback (Waiman Long) [RHEL-227838]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231355] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231355] {CVE-2026-64557}
  - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232556]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232556]
  - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232556] {CVE-2026-52991}
  - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232106] {CVE-2026-64191}
  - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230091] {CVE-2026-64048}
  - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() (Eder Zulian) [RHEL-213932] {CVE-2026-68324}
  - iommu/amd: Bound the early ACPI HID map (Eder Zulian) [RHEL-213932] {CVE-2026-68325}
  - iommu/vt-d: Disallow SVA if page walk is not coherent (Eder Zulian) [RHEL-213932]
  - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (Eder Zulian) [RHEL-213932] {CVE-2026-68329}
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Eder Zulian) [RHEL-213932] {CVE-2026-43220}
  - iommu/amd: move wait_on_sem() out of spinlock (Eder Zulian) [RHEL-213932] {CVE-2026-43253}
  - iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE (Eder Zulian) [RHEL-213932]
  - iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds (Eder Zulian) [RHEL-213932]
  - iommufd/viommu: Release the igroup lock on the vdevice_size error path (Eder Zulian) [RHEL-213932]
  - iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace (Eder Zulian) [RHEL-213932]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Eder Zulian) [RHEL-213932]
  - iommu/iommufd: Fix IOPF group ownership UAF (Eder Zulian) [RHEL-213932]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Eder Zulian) [RHEL-213932]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Eder Zulian) [RHEL-213932] {CVE-2026-64289}
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Eder Zulian) [RHEL-213932] {CVE-2026-53164}
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932] {CVE-2026-64290}
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Eder Zulian) [RHEL-213932]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Eder Zulian) [RHEL-213932]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Avoid WARNING in sva unbind path (Eder Zulian) [RHEL-213932] {CVE-2026-64591}
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Eder Zulian) [RHEL-213932]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Eder Zulian) [RHEL-213932]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Eder Zulian) [RHEL-213932]
  - iommufd: Set veventq_depth upper bound (Eder Zulian) [RHEL-213932] {CVE-2026-64291}
  - iommufd: Fix data_len byte-count vs element-count mismatch (Eder Zulian) [RHEL-213932]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Eder Zulian) [RHEL-213932]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Eder Zulian) [RHEL-213932]
  - iommu/amd: Fix premature break in init_iommu_one() (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Eder Zulian) [RHEL-213932]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Eder Zulian) [RHEL-213932]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Eder Zulian) [RHEL-213932] {CVE-2026-53283}
  - iommu/amd: Fix a stale comment about which legacy mode is user visible (Eder Zulian) [RHEL-213932]
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Eder Zulian) [RHEL-213932] {CVE-2026-64293}
  - iommufd: Fix a race with concurrent allocation and unmap (Eder Zulian) [RHEL-213932]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-213932] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Eder Zulian) [RHEL-213932] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Eder Zulian) [RHEL-213932]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Eder Zulian) [RHEL-213932]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Eder Zulian) [RHEL-213932]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Eder Zulian) [RHEL-213932]
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Eder Zulian) [RHEL-213932]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Eder Zulian) [RHEL-213932]
  - iommufd: vfio compatibility extension check for noiommu mode (Eder Zulian) [RHEL-213932]
  - iommu/arm-smmu-qcom: do not register driver in probe() (Eder Zulian) [RHEL-213932]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Eder Zulian) [RHEL-213932] {CVE-2025-71122}
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Eder Zulian) [RHEL-213932]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213921]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213921]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213921]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213921]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178418] {CVE-2026-43501}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-740.el9]
changelog:
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493}
  - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952}
  - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228526]
  - perf/x86/intel/uncore: Fix uncore_die_to_cpu() for offline dies (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Implement global init callback for GNR uncore (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Move die_to_cpu() to uncore.c (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Guard against invalid box control address (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems (Michael Petlan) [RHEL-115125]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-115121]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115125] {CVE-2026-43344}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115125] {CVE-2026-43079}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115125]
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117336]
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap() (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK (Michael Petlan) [RHEL-117336]
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros (Michael Petlan) [RHEL-117336]
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Change macro GLOBAL_CTRL_EN_PERF_METRICS to BIT_ULL(48) (Michael Petlan) [RHEL-117336]
  - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag (Michael Petlan) [RHEL-117336]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117336]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115121]
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit (Michael Petlan) [RHEL-115121]
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources (Michael Petlan) [RHEL-115121]
  - perf: Extend per event callchain limit to branch stack (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115121]
  - perf/x86/intel: Add a check for dynamic constraints (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Optimize PEBS extended config (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Anubhav Shelat) [RHEL-45125] {CVE-2026-53370}
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config (Anubhav Shelat) [RHEL-45125] {CVE-2026-31782}
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error (Anubhav Shelat) [RHEL-45125] {CVE-2025-40122}
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr() (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Use early_initcall() to hook bts_init() (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Add counter group support for arch-PEBS (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Process arch-PEBS records or record fragments (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Anubhav Shelat) [RHEL-45125]
  - perf/core: Check sample_type in perf_sample_save_callchain (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Remove redundant assignments to sample.period (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Initialize architectural PEBS (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Introduce pairs of PEBS static calls (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Decouple BTS initialization from PEBS initialization (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Correct large PEBS flag check (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Support auto counter reload (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Use better start period for frequency mode (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel: Track the num of events needs late setup (Anubhav Shelat) [RHEL-45125]
  - perf/x86: Add dynamic constraint (Anubhav Shelat) [RHEL-45125]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117338]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117338]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-115125]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115125]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115123]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120358]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95669]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-741.el9]
changelog:
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062}
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924}
  - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266}
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701]


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.643-11
changelog:
  - Fix arbitrary code execution via crafted profile package names
    (CVE-2026-14380)
    Related: RHEL-211150


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 6:5.8.5-2
changelog:
  - Rebuild for golang-1.26.6 CVE fixes (CVE-2025-68121 CVE-2026-27145
    CVE-2026-33811 CVE-2026-33818 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859
    CVE-2026-56860 CVE-2026-56862)
  - Resolves: RHEL-164485 RHEL-173976 RHEL-186006 RHEL-190092 RHEL-190858
    RHEL-212537 RHEL-241180 RHEL-241284 RHEL-241400 RHEL-241610 RHEL-241788


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-9
changelog:
  - Several sandbox and seunshare security improvements
  - https://github.com/SELinuxProject/selinux/security/advisories/GHSA-h4m3-rc99-c7m5


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-3
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176544


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.9-10
changelog:
  - Accept output_buffer_limit as an alias for max_output_length
    in Decompressor.process() for forward compatibility with upstream 1.2.0
  - Resolves: RHEL-221150


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 6.2.1.11-3.git4b3e853
changelog:
  - fix CVE-2026-44943: validate IQN names to prevent path traversal
  - fix CVE-2026-44944: iscsiuio control-socket credential verification


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Petr Menšík <pemensik@redhat.com> - 1.24.2-2
changelog:
  - Switch TLS configuration to follow TLS sockets by crypto-policy again
    (RHEL-147860)
  - Change the default of tls-use-system-policy-versions at build-time


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143112
  Resolves: RHEL-143172
  Resolves: RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-6
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143112, RHEL-143172, RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  Related: RHEL-168159, RHEL-167917


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-168159, RHEL-167917


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-167918, RHEL-168160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-167918, RHEL-168160


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-180642


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.3.4-2
changelog:
  - Fix issues identified via Coverity static analysis
  - Fix test_validate_transcendentals skip to match SVML dispatch
  - Fix signed overflow issue in npy_gcd for INT_MIN on s390x
  - Enable CET hardware protections
  - Fixes: RHEL-193002, RHEL-193001, RHEL-193000, RHEL-240103


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Dan Horák <dhorak@redhat.com> - 2.3.1-1
changelog:
  - updated to 2.3.1 (#2044214)
  - Add Support for new IBM Z Hardware (#2044215)
  - Resolves: #2044214 #2044215


author: Dan Horák <dhorak@redhat.com> - 2.5.0-1
changelog:
  - updated to 2.5.0 (RHEL-23692)
  - add runtime dependency for EBCDIC to ASCII conversion (RHEL-24407)
  - Resolves: RHEL-23692 RHEL-24407


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-11
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
  - Resolves: RHEL-138240
    (QEMU crashes when stopping source VM during live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-12
changelog:
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
  - Resolves: RHEL-132989
    (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
  - Resolves: RHEL-140187
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
  - Resolves: RHEL-139057
    ([qemu, rhel-9] increase default TSEG size)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
  - Resolves: RHEL-147422
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-130620
    (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-14
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
  - Resolves: RHEL-67115
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-15
changelog:
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
  - Resolves: RHEL-149396
    (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-16
changelog:
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
  - Resolves: RHEL-151679
    ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-17
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
  - Resolves: RHEL-155947
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
  - Resolves: RHEL-155948
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
  - Resolves: RHEL-154174
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-18
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-156851]
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-135379]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-135379]
  - Resolves: RHEL-156851
    (RHEL9.8 - [KVM] Guest configured with different boot order, crashed during "virsh reset".)
  - Resolves: RHEL-135379
    (Add stats-intervals support to --blockdev [rhel9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-19
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164535]
  - Resolves: RHEL-164535
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-20
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174859]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174859]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174859]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174859]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174859]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174859]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174859]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174859]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174859]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174859]
  - Resolves: RHEL-174859
    ([rhel9] Backport qemu cross-kernel migration mitigation series)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-21
changelog:
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-158243]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-158243]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-158243]
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-177969]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-177969]
  - Resolves: RHEL-158243
    (live migration failed the VM just register key only [rhel-9.9])
  - Resolves: RHEL-177969
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-22
changelog:
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184528]
  - Resolves: RHEL-184528
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-23
changelog:
  - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-158244]
  - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-158244]
  - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190701]
  - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190701]
  - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190701]
  - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190701]
  - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190701]
  - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190701]
  - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190701]
  - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190701]
  - kvm-migration-introduce-MIGRATION_STATUS_FAILING.patch [RHEL-45628]
  - kvm-s390x-css-limit-number-of-CHPIDs-in-description.patch [RHEL-193033]
  - kvm-s390x-ioinst-Require-strict-length-and-format-for-SE.patch [RHEL-193033]
  - kvm-s390x-pci-Shrink-RPCIT-ranges-to-registered-window.patch [RHEL-193033]
  - kvm-s390x-pci-Tighten-region-detection-for-BAR-read-writ.patch [RHEL-193033]
  - kvm-s390x-sclp-reject-invalid-write-event-data-headers.patch [RHEL-193033]
  - kvm-s390x-kvm-clamp-stsi-3.2.2-size.patch [RHEL-193033]
  - kvm-s390x-sclp-prevent-re-reading-the-sclp-header.patch [RHEL-193033]
  - kvm-s390x-sclpcpi-check-event-length-field-before-readin.patch [RHEL-193033]
  - kvm-s390x-css-firm-up-handling-of-chained-TIC-CCWs.patch [RHEL-193033]
  - Resolves: RHEL-158244
    (live migration failed or get failed WSFC test result during WSFC testing [rhel-9.9])
  - Resolves: RHEL-190701
    (qemu-kvm hung during drain after double pause [rhel-9])
  - Resolves: RHEL-45628
    (qemu-kvm crashes after kill virtproxyd on destination host during migration [RHEL-9.9])
  - Resolves: RHEL-193033
    (RHEL9.4 - qemu s390x: interface harding fixes)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-24
changelog:
  - kvm-block-graph-lock-fix-missed-wakeup-in-bdrv_graph_co_.patch [RHEL-216952]
  - kvm-block-curl-fix-curl-internal-handles-handling.patch [RHEL-216952]
  - kvm-block-curl.c-Use-explicit-long-constants-in-curl_eas.patch [RHEL-216952]
  - kvm-block-curl.c-Fix-CURLOPT_VERBOSE-parameter-type.patch [RHEL-216952]
  - kvm-block-curl-fix-concurrent-completion-handling.patch [RHEL-216952]
  - kvm-block-curl-free-s-password-in-cleanup-paths.patch [RHEL-216952]
  - kvm-nvme-Kick-and-check-completions-in-BDS-context.patch [RHEL-216952]
  - kvm-nvme-Note-in-which-AioContext-some-functions-run.patch [RHEL-216952]
  - kvm-block-remove-detached-header-option-from-opts-after-.patch [RHEL-216952]
  - kvm-block-fix-luks-amend-when-run-in-coroutine.patch [RHEL-216952]
  - kvm-qed-Don-t-try-to-flush-during-incoming-migration.patch [RHEL-216952]
  - kvm-block-vmdk-fix-OOB-read-in-vmdk_read_extent.patch [RHEL-216952]
  - kvm-block-throttle-groups-fix-deadlock-with-iolimits-and.patch [RHEL-216952]
  - kvm-throttle-group-Fix-race-condition-in-throttle_group_.patch [RHEL-216952]
  - kvm-qemu-img-Fix-amend-option-parse-error-handling.patch [RHEL-216952]
  - kvm-qemu-img-rebase-don-t-exceed-IO_BUF_SIZE-in-one-oper.patch [RHEL-216952]
  - kvm-python-backport-drop-Python3.6-workarounds.patch [RHEL-216952]
  - kvm-python-backport-Remove-deprecated-get_event_loop-cal.patch [RHEL-216952]
  - kvm-python-backport-avoid-creating-additional-event-loop.patch [RHEL-216952]
  - kvm-iotests-147-ensure-temporary-sockets-are-closed-befo.patch [RHEL-216952]
  - kvm-iotests-151-ensure-subprocesses-are-cleaned-up.patch [RHEL-216952]
  - kvm-tests-qemu-iotest-fix-iotest-024-with-qed-images.patch [RHEL-216952]
  - kvm-tests-qemu-iotests-Fix-check-for-existing-file-in-_r.patch [RHEL-216952]
  - kvm-async-access-bottom-half-flags-with-qatomic_read.patch [RHEL-216952]
  - kvm-block-linux-aio-bound-ioq_submit-recursion-depth.patch [RHEL-216952]
  - kvm-block-io-fallback-to-bounce-buffer-if-BLKZEROOUT-is-.patch [RHEL-216952]
  - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-216952]
  - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-216952]
  - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-216952]
  - kvm-virtio-Fix-crash-when-sriov-pf-is-set-for-non-PCI-Ex.patch [RHEL-216952]
  - kvm-virtio-scsi-pass-the-same-cdb_size-to-virtio_scsi_po.patch [RHEL-216952]
  - kvm-hw-scsi-avoid-deadlock-upon-TMF-request-cancelling-w.patch [RHEL-216952]
  - kvm-virtio-blk-fix-zone-report-buffer-out-of-memory-CVE-.patch [RHEL-216952]
  - kvm-ide-Fix-potential-assertion-failure-on-VM-stop-for-P.patch [RHEL-216952]
  - kvm-block-Create-DEFAULT_BLOCK_CONF-macro.patch [RHEL-216952]
  - kvm-block-Add-more-defaults-to-DEFAULT_BLOCK_CONF.patch [RHEL-216952]
  - kvm-block-mirror-check-range-when-setting-zero-bitmap-fo.patch [RHEL-216952]
  - kvm-iotests-test-active-mirror-with-unaligned-small-writ.patch [RHEL-216952]
  - kvm-block-mirror-fix-assertion-failure-upon-duplicate-co.patch [RHEL-216952]
  - kvm-commit-Drain-nodes-across-all-of-bdrv_commit.patch [RHEL-216952]
  - kvm-qemu-io-Add-aio_discard-command.patch [RHEL-216952]
  - kvm-qcow2-Fix-corruption-on-discard-during-write-with-CO.patch [RHEL-216952]
  - kvm-iotests-046-Test-that-discard-write_zeroes-wait-for-.patch [RHEL-216952]
  - kvm-qcow2-Fix-data-loss-on-zero-write-with-detect-zeroes.patch [RHEL-216952]
  - kvm-block-Fix-crash-after-setting-latency-historygram-wi.patch [RHEL-216952]
  - Resolves: RHEL-216952
    (virt-storage: Backport stable branch fixes [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-8
changelog:
  - kvm-Disable-TPM-passthrough.patch [bz#1978911]
  - kvm-redhat-Replace-the-kvm-setup.service-with-a-etc-modu.patch [bz#1978837]
  - Resolves: bz#1978911
    (Remove TPM Passthrough option from RHEL 9)
  - Resolves: bz#1978837
    (Remove/replace kvm-setup.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-9
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1932191]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957194]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1957194]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1957194]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1957194]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1957194]
  - Resolves: bz#1932191
    ([IBM 9.0 FEAT] CPU Model for new IBM Z Hardware - qemu part (kvm))
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-10
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1957194]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1957194]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1957194]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1957194]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1957194]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1957194]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1957194]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1957194]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1957194]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1957194]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1957194]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1957194]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1957194]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1957194]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1957194]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1957194]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1957194]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1957194]
  - kvm-block-Add-option-to-use-driver-whitelist-even-in-too.patch [bz#1957782]
  - kvm-spec-Restrict-block-drivers-in-tools.patch [bz#1957782]
  - kvm-Move-tools-to-separate-package.patch [bz#1972285]
  - kvm-Split-qemu-pr-helper-to-separate-package.patch [bz#1972300]
  - kvm-spec-RPM_BUILD_ROOT-buildroot.patch [bz#1973029]
  - kvm-spec-More-use-of-name-instead-of-qemu-kvm.patch [bz#1973029]
  - kvm-spec-Use-qemu-pr-helper.service-from-qemu.git.patch [bz#1973029]
  - kvm-spec-Use-_sourcedir-for-referencing-sources.patch [bz#1973029]
  - kvm-spec-Add-tools_only.patch [bz#1973029]
  - kvm-spec-build-Add-run_configure-helper.patch [bz#1973029]
  - kvm-spec-build-Disable-more-bits-with-disable_everything.patch [bz#1973029]
  - kvm-spec-build-Add-macros-for-some-configure-parameters.patch [bz#1973029]
  - kvm-spec-files-Move-qemu-guest-agent-and-qemu-img-earlie.patch [bz#1973029]
  - kvm-spec-install-Remove-redundant-bits.patch [bz#1973029]
  - kvm-spec-install-Add-modprobe_kvm_conf-macro.patch [bz#1973029]
  - kvm-spec-install-Remove-qemu-guest-agent-etc-qemu-kvm-us.patch [bz#1973029]
  - kvm-spec-install-clean-up-qemu-ga-section.patch [bz#1973029]
  - kvm-spec-install-Use-a-single-tools_only-section.patch [bz#1973029]
  - kvm-spec-Make-tools_only-not-cross-spec-sections.patch [bz#1973029]
  - kvm-spec-install-Limit-time-spent-in-qemu_kvm_build.patch [bz#1973029]
  - kvm-spec-misc-syntactic-merges-with-Fedora.patch [bz#1973029]
  - kvm-spec-Use-Fedora-s-pattern-for-specifying-rc-version.patch [bz#1973029]
  - kvm-spec-files-don-t-use-fine-grained-docs-file-list.patch [bz#1973029]
  - kvm-spec-files-Add-licenses-to-qemu-common-too.patch [bz#1973029]
  - kvm-spec-install-Drop-python3-shebang-fixup.patch [bz#1973029]
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1957782
    (VMDK support should be read-only)
  - Resolves: bz#1972285
    (Split out a qemu-kvm-tools subpackage)
  - Resolves: bz#1972300
    (Split out a qemu-pr-helper subpackage)
  - Resolves: bz#1973029
    (Spec file cleanups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-11
changelog:
  - kvm-arm-virt-Register-iommu-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Register-its-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Enable-ARM-RAS-support.patch [bz#1838608]
  - kvm-block-Fix-in_flight-leak-in-request-padding-error-pa.patch [bz#1972079]
  - kvm-spec-Remove-buildldflags.patch [bz#1973029]
  - kvm-spec-Use-make_build-macro.patch [bz#1973029]
  - kvm-spec-Drop-make-install-sharedir-and-datadir-usage.patch [bz#1973029]
  - kvm-spec-use-make_install-macro.patch [bz#1973029]
  - kvm-spec-parallelize-make-check.patch [bz#1973029]
  - kvm-spec-Drop-explicit-build-id.patch [bz#1973029]
  - kvm-spec-use-build_ldflags.patch [bz#1973029]
  - kvm-Move-virtiofsd-to-separate-package.patch [bz#1979728]
  - kvm-Utilize-firmware-configure-option.patch [bz#1980139]
  - Resolves: bz#1838608
    (aarch64: Enable ARMv8 RAS virtualization support)
  - Resolves: bz#1972079
    (Windows Installation blocked on 4k disk when using blk+raw+iothread)
  - Resolves: bz#1973029
    (Spec file cleanups)
  - Resolves: bz#1979728
    (Split out virtiofsd subpackage)
  - Resolves: bz#1980139
    (Use configure --firmwarepath more)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-12.el9
changelog:
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974683]
  - kvm-migration-Allow-reset-of-postcopy_recover_triggered-.patch [bz#1974683]
  - kvm-Remove-RHEL-7.0.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.1.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.2.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.3.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.4.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.5.0-machine-types.patch [bz#1968519]
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1957194]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1957194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1957194]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1957194]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1957194]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1957194]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1957194]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1957194]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1957194]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1957194]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1957194]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1957194]
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1957194]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1957194]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1957194]
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1957194]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1957194]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1957194]
  - kvm-audio-Never-send-migration-section.patch [bz#1957194]
  - kvm-pc-bios-s390-ccw-bootmap-Silence-compiler-warning-fr.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Use-reset_psw-pointer-instead-of-ha.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-netboot-Use-Wl-prefix-to-pass-param.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-warning-from-Clang-by-marki.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-the-cc-option-macro-in-the-Make.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-GCC-11-stringop-overflow-wa.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Allow-building-with-Clang-too.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-inline-assembly-for-older-versi.patch [bz#1939509 bz#1940132]
  - kvm-configure-Fix-endianess-test-with-LTO.patch [bz#1939509 bz#1940132]
  - kvm-spec-Switch-toolchain-to-Clang-LLVM.patch [bz#1939509 bz#1940132]
  - kvm-spec-Use-safe-stack-for-x86_64.patch [bz#1939509 bz#1940132]
  - kvm-spec-Reenable-write-support-for-VMDK-etc.-in-tools.patch [bz#1989841]
  - Resolves: bz#1974683
    (Fail to set migrate incoming for 2nd time after the first time failed)
  - Resolves: bz#1968519
    (Remove all the old 7.0-7.5 machine types)
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1939509
    (QEMU: enable SafeStack)
  - Resolves: bz#1940132
    (QEMU: switch build toolchain to Clang/LLVM)
  - Resolves: bz#1989841
    (RFE: qemu-img cannot convert images into vmdk and vpc formats)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-13
changelog:
  - kvm-qcow2-Deprecation-warning-when-opening-v2-images-rw.patch [bz#1951814]
  - kvm-disable-ac97-audio.patch [bz#1995819]
  - kvm-redhat-Disable-LTO-on-non-x86-architectures.patch [bz#1950192]
  - kvm-redhat-Enable-the-test-block-iothread-test-again.patch [bz#1950192]
  - Resolves: bz#1951814
    (RFE: Warning when using qcow2-v2 (compat=0.10))
  - Resolves: bz#1995819
    (RFE: Remove ac97 audio support from QEMU)
  - Resolves: bz#1950192
    (RHEL9: when ioeventfd=off and 8.4guest, (qemu) qemu-kvm: ../util/qemu-coroutine-lock.c:57: qemu_co_queue_wait_impl: Assertion `qemu_in_coroutine()' failed.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-2
changelog:
  - kvm-hw-arm-virt-Remove-9.0-machine-type.patch [bz#2002937]
  - kvm-remove-sgabios-dependency.patch [bz#2000845]
  - kvm-enable-pulseaudio.patch [bz#1997725]
  - kvm-spec-disable-use-of-gcrypt-for-crypto-backends-in-fa.patch [bz#1990068]
  - Resolves: bz#2002937
    ([qemu][aarch64] Remove 9.0 machine types in arm virt for 9-Beta)
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#1997725
    (RFE: enable pulseaudio backend on QEMU)
  - Resolves: bz#1990068
    (Disable use of gcrypt for crypto backends in favour of gnutls)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-3
changelog:
  - kvm-disable-sga-device.patch [bz#2000845]
  - kvm-tools-virtiofsd-Add-fstatfs64-syscall-to-the-seccomp.patch [bz#2005026]
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#2005026
    ([s390][virtio-fs] Umount virtiofs shared folder failure from guest side [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-4
changelog:
  - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823]
  - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823]
  - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823]
  - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823]
  - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823]
  - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823]
  - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938]
  - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938]
  - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347]
  - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347]
  - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347]
  - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710]
  - kvm-migration-Fix-operator-type.patch [bz#2064530]
  - Resolves: bz#2041823
    ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken')
  - Resolves: bz#2079938
    (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory)
  - Resolves: bz#2079347
    (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption)
  - Resolves: bz#1995710
    (RFE: Allow virtio-scsi CD-ROM media change with IOThreads)
  - Resolves: bz#2064530
    (Rebuild qemu-kvm with clang-14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-5
changelog:
  - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300]
  - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300]
  - Resolves: bz#1708300
    (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-2
changelog:
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [RHELX-57]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [RHELX-57]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [RHELX-57]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [RHELX-57]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [RHELX-57]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [RHELX-57]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [RHELX-57]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [RHELX-57]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [RHELX-57]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [RHELX-57]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [RHELX-57]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [RHELX-57]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [RHELX-57]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [RHELX-57]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [RHELX-57]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [RHELX-57]
  - kvm-vdpa-Make-VhostVDPAState-cvq_cmd_in_buffer-control-a.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_load_mac-from-vhost_vdpa.patch [RHELX-57]
  - kvm-vdpa-Add-vhost_vdpa_net_load_mq.patch [RHELX-57]
  - kvm-vdpa-validate-MQ-CVQ-commands.patch [RHELX-57]
  - kvm-virtio-net-Update-virtio-net-curr_queue_pairs-in-vdp.patch [RHELX-57]
  - kvm-vdpa-Allow-MQ-feature-in-SVQ.patch [RHELX-57]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125281]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125281]
  - kvm-Revert-Re-enable-capstone-internal-build.patch [bz#2127825]
  - kvm-spec-Use-capstone-package.patch [bz#2127825]
  - Resolves: RHELX-57
    (vDPA SVQ Multiqueue support )
  - Resolves: bz#2125281
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-9.2.0])
  - Resolves: bz#2127825
    (Use capstone for qemu-kvm build)


author: Jon Maloy <jmaloy@redhat.com> - 7.1.0-3
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2108531]
  - Resolves: bz#2108531
    (Windows guest reboot after migration with wsl2 installed inside)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-4
changelog:
  - kvm-Revert-intel_iommu-Fix-irqchip-X2APIC-configuration-.patch [bz#2126095]
  - Resolves: bz#2126095
    ([rhel9.2][intel_iommu]Booting guest with "-device intel-iommu,intremap=on,device-iotlb=on,caching-mode=on" causes kernel call trace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-5
changelog:
  - kvm-rtl8139-Remove-unused-variable.patch [bz#2141218]
  - kvm-qemu-img-remove-unused-variable.patch [bz#2141218]
  - kvm-host-libusb-Remove-unused-variable.patch [bz#2141218]
  - Resolves: bz#2141218
    (qemu-kvm build fails with clang 15.0.1 due to false unused variable error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-6
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [bz#2143170]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [bz#2143170]
  - Resolves: bz#2143170
    (The installation can not start when install files (iso) locate on a 4k disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-and-rhel9.0.0-machine-types-for.patch [bz#2008060]
  - kvm-redhat-Enable-virtio-mem-as-tech-preview-on-x86-64.patch [bz#2014484]
  - Resolves: bz#2008060
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2014484
    ([RHEL9] Enable virtio-mem as tech-preview on x86-64 - QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-3
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031044]
  - kvm-hw-arm-virt-Expose-the-RAS-option.patch [bz#2031044]
  - kvm-hw-arm-virt-Add-9.0-machine-type-and-remove-8.5-one.patch [bz#2031044]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031044]
  - Resolves: bz#2031044
    (Add rhel-9.0.0 machine types for RHEL 9.0 [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-4
changelog:
  - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623]
  - Resolves: bz#2024544
    (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver)
  - Resolves: bz#2028623
    ([9.0] machine types: 6.2: Fix prefer_sockets)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-5
changelog:
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666]
  - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669]
  - Resolves: bz#1945666
    (9.0: x86 machine types)
  - Resolves: bz#2036669
    (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-6
changelog:
  - Moving feature support out of qemu-kvm-core to separate packages (can
    cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps
    same feature set).
  - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847]
  - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847]
  - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847]
  - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847]
  - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847]
  - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847]
  - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847]
  - Resolves: bz#2022847
    (qemu-kvm: Align package split with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-4
changelog:
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998943]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998943]
  - Resolves: bz#1998943
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-5
changelog:
  - kvm-virtio-balloon-Fix-page-poison-subsection-name.patch [bz#1984401]
  - kvm-spec-Remove-block-curl-and-block-ssh-dependency.patch [bz#2010985]
  - Resolves: bz#1984401
    (fails to revert snapshot of a VM [balloon/page-poison])
  - Resolves: bz#2010985
    (Remove dependency on qemu-kvm-block-curl and qemu-kvm-block-ssh [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-6
changelog:
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998942]
  - Resolves: bz#1998942
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-7
changelog:
  - kvm-migration-Make-migration-blocker-work-for-snapshots-.patch [bz#1996609]
  - kvm-migration-Add-migrate_add_blocker_internal.patch [bz#1996609]
  - kvm-dump-guest-memory-Block-live-migration.patch [bz#1996609]
  - kvm-spec-Build-the-VDI-block-driver.patch [bz#2013331]
  - kvm-spec-Explicitly-include-compress-filter.patch [bz#1980035]
  - Resolves: bz#1996609
    (Qemu hit core dump when dump guest memory during live migration)
  - Resolves: bz#2013331
    (RFE: qemu-img cannot convert from vdi format)
  - Resolves: bz#1980035
    (RFE: Enable compress filter so we can create new, compressed qcow2 files via qemu-nbd)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-8
changelog:
  - kvm-Move-ksmtuned-files-to-separate-package.patch [bz#1971678]
  - Resolves: bz#1971678
    (Split out ksmtuned package from qemu-kvm)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.13-5
changelog:
  - Update rhc-worker-playbook to 0.1.13 (RHEL-137408)
  - Reduce size of rhc-worker-playbook messages (RHEL-142699)
  - Invoke rhc-playbook-verifier for playbook verification (RHEL-142700)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-5
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/5575
    Backport https://github.com/coreos/rpm-ostree/pull/5576
    Resolves: RHEL-154808


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-66274
  - man page version update
    Resolves: RHEL-78220
  - omfwd: do not hang forever in case of broken TLS handshake
    Resolves: RHEL-67639


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-2
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-86031
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-42508
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-105782


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-1
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140914
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-169794
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-169492
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-171897
  - Move logrotate configuration back to the main package
    Resolves: RHEL-173192


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Backport omelasticsearch PQC TLS parameters (tls.tlsversion, tls.ciphersuites,
    tls.keyexchangegroups) and apply them during startup version detection
    Resolves: RHEL-193506


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-3
changelog:
  - Backport: warn when imjournal fails to retrieve MESSAGE field from journal entry
    Resolves: RHEL-194529


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68631
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86109
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-5
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-106821
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-126728


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-6
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171260


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-32
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170932
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-171261
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169965


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-33
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
    Resolves: RHEL-181683
  - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
    Resolves: RHEL-181776
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
    Resolves: RHEL-181807


author: Jindrich Novy <jnovy@redhat.com> - 4:1.4.2-2
changelog:
  - Rebuild for golang-1.26.6 CVE fixes (CVE-2025-68121 CVE-2026-33811
    CVE-2026-56860) - Resolves: RHEL-164488 RHEL-187337 RHEL-241842


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136098)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153547)
  - Resolves: RHEL-136098 RHEL-153547


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174896)
  - hyptop: Backward compatibility options causes other issues (RHEL-166158)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-169659)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136434)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136437)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73137)
  - Cannot configure "portno" of the network interface (RHEL-76751)
  - Resolves: RHEL-174896 RHEL-166158 RHEL-169659 RHEL-136434 RHEL-136437 RHEL-73137 RHEL-76751


author: Dan Horák <dhorak@redhat.com> - 2:2.44.0-1
changelog:
  - rebased to 2.44.0 (RHEL-174896)
  - KVM: Quantum Safe SE Header and tooling support (RHEL-149688)
  - Introduce NVMe SMART data monitoring to the zpcimon service (RHEL-191176)
  - zkey key support for dm-integrity with HMAC (RHEL-50021)
  - fix zipl support for mixed type mdadm RAID1 devices (RHEL-191425)
  - Resolves: RHEL-174896 RHEL-149688 RHEL-191176 RHEL-50021 RHEL-191425


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-1
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156320 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161658 - CVE-2026-4480 Samba: Remote Code Execution in
    printing
  - resolves: RHEL-170594 - CVE-2026-40170 samba: ngtcp2
  - resolves: RHEL-177925 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166869 - build hardening with FORTIFY_SOURCE


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-26
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-118293
  - Eliminate use of obsolete %patchN syntax
    Related: RHEL-91101
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-91101
  - Add support for Image Mode
    Resolves: RHEL-91101


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-170602


author: Jindrich Novy <jnovy@redhat.com> - 3:1.22.2-1
changelog:
  - switch to sustaining-engineering GitLab release-1.22 branch and bump epoch to
    fix upgrade path
  - Resolves: RHEL-220456


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94765


author: Jindrich Novy <jnovy@redhat.com> - 1.3.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.4
  - Resolves: RHEL-212436


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11416 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-12
changelog:
  - Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26092 - squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-13
changelog:
  - Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
    at kernel level but it is asked to connect to an ipv6 address by a client


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-14
changelog:
  - Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
    Service (CVE-2024-37894)
  - Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
    Cache Manager error responses (CVE-2024-23638)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-23
changelog:
  - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-24
changelog:
  - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-26
changelog:
  - Resolves: RHEL-160697 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160696 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Justin Stephenson <jstephen@redhat.com> - 2.9.9-3
changelog:
  - Resolves: RHEL-192062 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192072 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109088


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-108827


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Remove LTO build flags
  - Make queue_track the default backend
  - Remove the -m64 build option
  Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124976
  - Allow a pool to make use of added capacity of a block device
  - Resolves: rhbz#2039955
  - Enforce per-pool consistency of block device sector sizes
  - Resolves: rhbz#2039957
  - Do not read data from device specified in udev remove event
  - Resolves: rhbz#2124681
  - Specify pool to start by its name
  - Resolves: rhbz#2125012


author: Bryan Gurney <bgurney@redhat.com> - 3.5.5-1
changelog:
  - Update to version 3.5.5
  - Resolves: rhbz#2167463
  - Take into account the sector size of crypt devices
  - Resolves: rhbz#2170318
  - Add stratisd-tools package with stratis-dumpmetadata program
  - Resolves: rhbz#2173726
  - Support key description key in kernel keyring
  - Resolves: rhbz#2038492


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-2
changelog:
  - Request to backport support for regex in sudo [rhel-9]
  Resolves: RHEL-1376
  - Rebase of sudo to 1.9.17p2 [rhel-9]
  Resolves: RHEL-128623
  - sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
  Resolves: RHEL-127359


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-4
changelog:
  - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
  Resolves: RHEL-166066


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: Pavel Šimovec <psimovec@redhat.com> - 12.5.4-6
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


