# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-578.el9]
changelog:
  - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs (David Arcari) [RHEL-47428]
  - mfd: intel-lpss: Switch over to MSI interrupts (David Arcari) [RHEL-47428]
  - main.c: fix initcall blacklisted (Tomas Henzl) [RHEL-83272]
  - block: change blk_mq_add_to_batch() third argument type to bool (Ming Lei) [RHEL-79409]
  - nvme: move error logging from nvme_end_req() to __nvme_end_req() (Ming Lei) [RHEL-79409]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-79409]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-79409]
  - Add CONFIG_SCSI_PROTO_TEST entry (Ming Lei) [RHEL-79409]
  - ext4: pass write-hint for buffered IO (Ming Lei) [RHEL-79409]
  - scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices (Ming Lei) [RHEL-79409]
  - scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag (Ming Lei) [RHEL-79409]
  - scsi: sd: Only print updates to permanent stream count (Ming Lei) [RHEL-79409]
  - Add CONFIG_OF_PARTITION entry (Ming Lei) [RHEL-79409]
  - arm64: patching: avoid early page_to_phys() (Ming Lei) [RHEL-79409]
  - arm64: patching: fix handling of execmem addresses (Ming Lei) [RHEL-79409]
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei) [RHEL-79409]
  - block: Remove zone write plugs when handling native zone append writes (Ming Lei) [RHEL-79409]
  - block: make segment size limit workable for > 4K PAGE_SIZE (Ming Lei) [RHEL-79409]
  - block: fix NULL pointer dereferenced within __blk_rq_map_sg (Ming Lei) [RHEL-79409]
  - block/merge: remove unnecessary min() with UINT_MAX (Ming Lei) [RHEL-79409]
  - partitions: mac: fix handling of bogus partition table (Ming Lei) [RHEL-79409]
  - block: cleanup and fix batch completion adding conditions (Ming Lei) [RHEL-79409]
  - drivers/block/sunvdc.c: update the correct AIP call (Ming Lei) [RHEL-79409]
  - block: force noio scope in blk_mq_freeze_queue (Ming Lei) [RHEL-79409]
  - block: fix nr_hw_queue update racing with disk addition/removal (Ming Lei) [RHEL-79409]
  - block: get rid of request queue ->sysfs_dir_lock (Ming Lei) [RHEL-79409]
  - loop: don't clear LO_FLAGS_PARTSCAN on LOOP_SET_STATUS{,64} (Ming Lei) [RHEL-79409]
  - blk-mq: create correct map for fallback case (Ming Lei) [RHEL-79409]
  - block: don't revert iter for -EIOCBQUEUED (Ming Lei) [RHEL-79409]
  - block: Don't trim an atomic write (Ming Lei) [RHEL-79409]
  - block: limit disk max sectors to (LLONG_MAX >> 9) (Ming Lei) [RHEL-79409]
  - block: Change blk_stack_atomic_writes_limits() unit_min check (Ming Lei) [RHEL-79409]
  - blk-mq: Move more error handling into blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - block: Reorder the request allocation code in blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - partitions: ldm: remove the initial kernel-doc notation (Ming Lei) [RHEL-79409]
  - blk-cgroup: rwstat: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - blk-cgroup: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - block: mark GFP_NOIO around sysfs ->store() (Ming Lei) [RHEL-79409]
  - loop: remove the use_dio field in struct loop_device (Ming Lei) [RHEL-79409]
  - loop: don't freeze the queue in loop_update_dio (Ming Lei) [RHEL-79409]
  - loop: allow loop_set_status to re-enable direct I/O (Ming Lei) [RHEL-79409]
  - loop: open code the direct I/O flag update in loop_set_dio (Ming Lei) [RHEL-79409]
  - loop: only write back pagecache when starting to to use direct I/O (Ming Lei) [RHEL-79409]
  - loop: create a lo_can_use_dio helper (Ming Lei) [RHEL-79409]
  - loop: update commands in loop_set_status still referring to transfers (Ming Lei) [RHEL-79409]
  - loop: move updating lo_flags out of loop_set_status_from_info (Ming Lei) [RHEL-79409]
  - nbd: don't allow reconnect after disconnect (Ming Lei) [RHEL-79409]
  - block: simplify tag allocation policy selection (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_NO_SCHED (Ming Lei) [RHEL-79409]
  - block: remove blk_mq_init_bitmaps (Ming Lei) [RHEL-79409]
  - block: better split mq vs non-mq code in add_disk_fwnode (Ming Lei) [RHEL-79409]
  - block: add a dma mapping iterator (Ming Lei) [RHEL-79409]
  - block: use page_to_phys in bvec_phys (Ming Lei) [RHEL-79409]
  - block: remove blk_rq_bio_prep (Ming Lei) [RHEL-79409]
  - block: remove bio_add_pc_page (Ming Lei) [RHEL-79409]
  - block/blk-map: Remove set but unused variable 'added' (Ming Lei) [RHEL-79409]
  - ps3disk: Do not use dev->bounce_size before it is set (Ming Lei) [RHEL-79409]
  - block: retry call probe after request_module in blk_request_module (Ming Lei) [RHEL-79409]
  - kyber: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block, bfq: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block: mq-deadline: Constify sysfs attributes (Ming Lei) [RHEL-79409]
  - elevator: Enable const sysfs attributes (Ming Lei) [RHEL-79409]
  - blk-zoned: Split queue_zone_wplugs_show() (Ming Lei) [RHEL-79409]
  - blk-zoned: Improve the queue reference count strategy documentation (Ming Lei) [RHEL-79409]
  - blk-zoned: Document locking assumptions (Ming Lei) [RHEL-79409]
  - blk-zoned: Minimize #include directives (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_SHOULD_MERGE (Ming Lei) [RHEL-79409]
  - blk-mq: remove unused queue mapping helpers (Ming Lei) [RHEL-79409]
  - virtio: blk/scsi: replace blk_mq_virtio_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - nvme: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - blk-mq: introduce blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - virtio: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - PCI: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - driver core: bus: add irq_get_affinity callback to bus_type (Ming Lei) [RHEL-79409]
  - null_blk: Remove accesses to page->index (Ming Lei) [RHEL-79409]
  - blktrace: remove redundant return at end of function (Ming Lei) [RHEL-79409]
  - block: Delete bio_prio() (Ming Lei) [RHEL-79409]
  - blktrace: move copy_[to|from]_user() out of ->debugfs_lock (Ming Lei) [RHEL-79409]
  - blktrace: don't centralize grabbing q->debugfs_mutex in blk_trace_ioctl (Ming Lei) [RHEL-79409]
  - null_blk: Add rotational feature support (Ming Lei) [RHEL-79409]
  - block: track queue dying state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: don't verify queue freeze manually in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: track disk DEAD state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: remove unnecessary check in blk_unfreeze_check_owner() (Ming Lei) [RHEL-79409]
  - asm-generic: add an optional pfn_valid check to page_to_phys (Ming Lei) [RHEL-79409]
  - asm-generic: provide generic page_to_phys and phys_to_page implementations (Ming Lei) [RHEL-79409]
  - cdrom: Fix typo, 'devicen' to 'device' (Ming Lei) [RHEL-79409]
  - block: avoid to reuse `hctx` not removed from cpuhp callback list (Ming Lei) [RHEL-79409]
  - nvme: use blk_validate_block_size() for max LBA check (Ming Lei) [RHEL-79409]
  - block/bdev: use helper for max block size check (Ming Lei) [RHEL-79409]
  - block: Fix queue_iostats_passthrough_show() (Ming Lei) [RHEL-79409]
  - blk-mq: Clean up blk_mq_requeue_work() (Ming Lei) [RHEL-79409]
  - mq-deadline: Remove a local variable (Ming Lei) [RHEL-79409]
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Ming Lei) [RHEL-79409]
  - block: Make bio_iov_bvec_set() accept pointer to const iov_iter (Ming Lei) [RHEL-79409]
  - block: get wp_offset by bdev_offset_from_zone_start (Ming Lei) [RHEL-79409]
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock (Ming Lei) [RHEL-79409]
  - blk-mq: register cpuhp callback after hctx is added to xarray table (Ming Lei) [RHEL-79409]
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [RHEL-79409]
  - brd: decrease the number of allocated pages which discarded (Ming Lei) [RHEL-79409]
  - block: Don't allow an atomic write be truncated in blkdev_write_iter() (Ming Lei) [RHEL-79409]
  - fs: Export generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block: Add bdev atomic write limits helpers (Ming Lei) [RHEL-79409]
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block/fs: Pass an iocb to generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - mq-deadline: don't call req_get_ioprio from the I/O completion handler (Ming Lei) [RHEL-79409]
  - block: Remove extra part pointer NULLify in blk_rq_init() (Ming Lei) [RHEL-79409]
  - block: return bool from get_disk_ro and bdev_read_only (Ming Lei) [RHEL-79409]
  - block: remove a duplicate definition for bdev_read_only (Ming Lei) [RHEL-79409]
  - block: return bool from blk_rq_aligned (Ming Lei) [RHEL-79409]
  - block: return unsigned int from blk_lim_dma_alignment_and_pad (Ming Lei) [RHEL-79409]
  - block: return unsigned int from queue_dma_alignment (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_opt (Ming Lei) [RHEL-79409]
  - block: req->bio is always set in the merge code (Ming Lei) [RHEL-79409]
  - block: don't bother checking the data direction for merges (Ming Lei) [RHEL-79409]
  - block: blk-mq: fix uninit-value in blk_rq_prep_clone and refactor (Ming Lei) [RHEL-79409]
  - block: Add extra checks in blk_validate_atomic_write_limits() (Ming Lei) [RHEL-79409]
  - block: Drop granularity check in queue_limit_discard_alignment() (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_min (Ming Lei) [RHEL-79409]
  - blk-settings: round down io_opt to physical_block_size (Ming Lei) [RHEL-79409]
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive (Ming Lei) [RHEL-79409]
  - block: make struct rq_list available for !CONFIG_BLOCK (Ming Lei) [RHEL-79409]
  - block/genhd: use seq_put_decimal_ull for diskstats decimal values (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_mq_add_to_batch (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_add_rq_to_plug (Ming Lei) [RHEL-79409]
  - block: add a rq_list type (Ming Lei) [RHEL-79409]
  - block: remove rq_list_move (Ming Lei) [RHEL-79409]
  - virtio_blk: reverse request order in virtio_queue_rqs (Ming Lei) [RHEL-79409]
  - nvme-pci: reverse request order in nvme_queue_rqs (Ming Lei) [RHEL-79409]
  - block: export blk_validate_limits (Ming Lei) [RHEL-79409]
  - block: remove the ioprio field from struct request (Ming Lei) [RHEL-79409]
  - block: remove the write_hint field from struct request (Ming Lei) [RHEL-79409]
  - scsi: sd: Translate data lifetime information (Ming Lei) [RHEL-79409]
  - scsi: scsi_proto: Add structures and constants related to I/O groups and streams (Ming Lei) [RHEL-79409]
  - scsi: core: Query the Block Limits Extension VPD page (Ming Lei) [RHEL-79409]
  - block, fs: Restore the per-bio/request data lifetime fields (Ming Lei) [RHEL-79409]
  - fs: Propagate write hints to the struct block_device inode (Ming Lei) [RHEL-79409]
  - fs: Move enum rw_hint into a new header file (Ming Lei) [RHEL-79409]
  - fs: Split fcntl_rw_hint() (Ming Lei) [RHEL-79409]
  - fs: Verify write lifetime constants at compile time (Ming Lei) [RHEL-79409]
  - fs: Fix rw_hint validation (Ming Lei) [RHEL-79409]
  - nvme-multipath: don't bother clearing max_hw_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: pre-calculate max_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: lift bio_is_zone_append to bio.h (Ming Lei) [RHEL-79409]
  - block: fix bio_split_rw_at to take zone_write_granularity into account (Ming Lei) [RHEL-79409]
  - block: take chunk_sectors into account in bio_split_write_zeroes (Ming Lei) [RHEL-79409]
  - block: Handle bio_split() errors in bio_submit_split() (Ming Lei) [RHEL-79409]
  - block: Error an attempt to split an atomic write in bio_split() (Ming Lei) [RHEL-79409]
  - block: Rework bio_split() return value (Ming Lei) [RHEL-79409]
  - s390/dasd: Fix typo in comment (Ming Lei) [RHEL-79409]
  - s390/dasd: fix redundant /proc/dasd* entries removal (Ming Lei) [RHEL-79409]
  - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: always verify unfreeze lock on the owner task (Ming Lei) [RHEL-79409]
  - rbd: unfreeze queue after marking disk as dead (Ming Lei) [RHEL-79409]
  - block: remove blk_freeze_queue() (Ming Lei) [RHEL-79409]
  - block: Replace sprintf() with sysfs_emit() (Ming Lei) [RHEL-79409]
  - nvme: add reservation command's defines (Ming Lei) [RHEL-79409]
  - mtip32xx: Replace deprecated PCI functions (Ming Lei) [RHEL-79409]
  - block: remove the max_zone_append_sectors check in blk_revalidate_disk_zones (Ming Lei) [RHEL-79409]
  - block: update blk_stack_limits documentation (Ming Lei) [RHEL-79409]
  - lib/iov_iter: fix bvec iterator setup (Ming Lei) [RHEL-79409]
  - block: remove bio_add_zone_append_page (Ming Lei) [RHEL-79409]
  - lib/iov_iter.c: initialize bi.bi_idx before iterating over bvec (Ming Lei) [RHEL-79409]
  - blk-integrity: remove seed for user mapped buffers (Ming Lei) [RHEL-79409]
  - block: set bip_vcnt correctly (Ming Lei) [RHEL-79409]
  - block: add a bdev_limits helper (Ming Lei) [RHEL-79409]
  - iov_iter: don't require contiguous pages in iov_iter_extract_bvec_pages (Ming Lei) [RHEL-79409]
  - block: model freeze & enter queue as lock for supporting lockdep (Ming Lei) [RHEL-79409]
  - nvme: core: switch to non_owner variant of start_freeze/unfreeze queue (Ming Lei) [RHEL-79409]
  - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs (Ming Lei) [RHEL-79409]
  - blk-mq: Unexport blk_mq_flush_busy_ctxs() (Ming Lei) [RHEL-79409]
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long (Ming Lei) [RHEL-79409]
  - block: remove redundant explicit memory barrier from rq_qos waiter and waker (Ming Lei) [RHEL-79409]
  - block: flush all throttled bios when deleting the cgroup (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding (Ming Lei) [RHEL-79409]
  - block: fix missing dispatching request when queue is started or unquiesced (Ming Lei) [RHEL-79409]
  - Revert "blk-throttle: Fix IO hang for a corner case" (Ming Lei) [RHEL-79409]
  - block: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Ming Lei) [RHEL-79409]
  - block: enable passthrough command statistics (Ming Lei) [RHEL-79409]
  - block: add partition uuid into uevent as "PARTUUID" (Ming Lei) [RHEL-79409]
  - block: move issue side time stamping to blk_account_io_start() (Ming Lei) [RHEL-79409]
  - block: set issue time stamp based on queue state (Ming Lei) [RHEL-79409]
  - block: add support for partition table defined in OF (Ming Lei) [RHEL-79409]
  - mmc: block: attach partitions fwnode if found in mmc-card (Ming Lei) [RHEL-79409]
  - block: introduce add_disk_fwnode() (Ming Lei) [RHEL-79409]
  - docs: block: Document support for read-only partition in cmdline part (Ming Lei) [RHEL-79409]
  - block: add support for defining read-only partitions (Ming Lei) [RHEL-79409]
  - block: kill blk_do_io_stat() helper (Ming Lei) [RHEL-79409]
  - block: remove 'req->part' check for stats accounting (Ming Lei) [RHEL-79409]
  - block: remove redundant passthrough check in blk_mq_need_time_stamp() (Ming Lei) [RHEL-79409]
  - block: move iostat check into blk_acount_io_start() (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_make_it_fail to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_ro_warned to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_has_subit_bio to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_write_holder into ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_read_only to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: infrastructure for flags (Ming Lei) [RHEL-79409]
  - wrapper for access to ->bd_partno (Ming Lei) [RHEL-79409]
  - Use bdev_is_paritition() instead of open-coding it (Ming Lei) [RHEL-79409]
  - nfsd: clear acl_access/acl_default after releasing them (Olga Kornievskaia) [RHEL-81523] {CVE-2025-21796}
  - vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-73613]
  - vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-73613]
  - vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-73613]
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-73613]
  - vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-73613]
  - mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm/x86: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: follow_pte() improvements (Donald Dutile) [RHEL-73613]
  - mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - KVM: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-73613]
  - mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-73613]
  - mm: new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pfn (Donald Dutile) [RHEL-73613]
  - mm: always define pxx_pgprot() (Donald Dutile) [RHEL-73613]
  - mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-73613]
  - mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-73613]
  - mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-73613]
  - mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-73613]
  - mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-73613]
  - mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-73613]
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-73613]
  - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Initialize HCR_EL2.E2H early (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Shave a few bytes from the EL2 idmap code (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix tcr_el2 initialisation in hVHE mode (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Hoist SGI/PPI alloc from vgic_init() to kvm_create_vgic() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Drop warning on failed interrupt signalling (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix alignment of kvm_hyp_memcache allocations (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Simplify warning in kvm_arch_vcpu_load_fp() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Always evaluate the need for a soft timer (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nested S2 MMU structures reallocation (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fail protected mode init if no vgic hardware is present (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Mark some header functions as inline (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Refactor exit handlers (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add predicate for FPMR support in a VM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Flush hyp bss section after initialization of variables in bss (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix selftests after sysreg field name update (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Explicitly handle BRBE traps as UNDEFINED (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Use str_enabled_disabled() in vgic_v3_probe() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nVHE stacktrace VA bits mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix FEAT_MTE in pKVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Advertise the lack of AArch32 EL0 support (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix the value of the CPTR_EL2 RES1 bitmask for nVHE (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix RAS trapping in pKVM for protected VMs (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Drop MDSCR_EL1_DEBUG_MASK (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Avoid invalid physical addresses to signal owner updates (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Reload PMU events upon MDCR_EL2.HPME change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Use KVM_REQ_RELOAD_PMU to handle PMCR_EL0.E change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add unified helper for reprogramming counters by mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Always check the state from hyp_ack_unshare() (Gavin Shan) [RHEL-82298]
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-85597] {CVE-2024-58007}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-85597]
  - soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-85597]
  - mm/mm_init.c: print mem_init info after defer_init is done (Eric Chanudet) [RHEL-85565]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial] (David Arcari) [RHEL-85522]
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (David Arcari) [RHEL-85522]
  - intel_idle: introduce 'no_native' module parameter (David Arcari) [RHEL-85522]
  - intel_idle: clean up BYT/CHT auto demotion disable (David Arcari) [RHEL-85522]
  - intel_idle: Provide the default enter_dead() handler (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Export acpi_processor_ffh_play_dead() (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Add FFH state handling (David Arcari) [RHEL-85522]
  - x86/smp: Allow calling mwait_play_dead with an arbitrary hint (David Arcari) [RHEL-85522]
  - cpuidle: Change :enter_dead() driver callback return type to void (David Arcari) [RHEL-85522]
  - cpuidle: Do not return from cpuidle_play_dead() on callback failures (David Arcari) [RHEL-85522]
  - x86/cpu: Remove unnecessary MwAIT leaf checks (David Arcari) [RHEL-85522]
  - intel_idle: add Clearwater Forest SoC support (David Arcari) [RHEL-45063]
  - sched/stats: Print domain name in /proc/schedstat (Phil Auld) [RHEL-23495]
  - docs: Update Schedstat version to 17 (Phil Auld) [RHEL-23495]
  - sched/fair: Cleanup in migrate_degrades_locality() to improve readability (Phil Auld) [RHEL-23495]
  - sched: Report the different kinds of imbalances in /proc/schedstat (Phil Auld) [RHEL-23495]
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG (Phil Auld) [RHEL-23495]
  - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Phil Auld) [RHEL-23495]
  - RDMA/core: Support link status events dispatching (Kamal Heib) [RHEL-78087]
  - RDMA/core: Add ib_query_netdev_port() to query netdev port by IB device. (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_copy_path_rec_from_user (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ibdev_printk (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_find_exact_cached_pkey (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_ud_header_unpack (Kamal Heib) [RHEL-78087]
  - RDMA/srp: Fix error handling in srp_add_port (Kamal Heib) [RHEL-78087]
  - padata: avoid UAF for reorder_work (Waiman Long) [RHEL-81522] {CVE-2025-21726}
  - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-81522]
  - padata: add pd get/put refcnt helper (Waiman Long) [RHEL-81522]
  - padata: fix sysfs store callback check (Waiman Long) [RHEL-81522]
  - padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-81522]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-69649 RHEL-83224] {CVE-2025-21864}
  - cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (David Arcari) [RHEL-85517]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (David Arcari) [RHEL-85517]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Relocate platform preference check (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Make it possible to avoid enabling CAS (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPUFREQ_POLICY_UNKNOWN (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Drop Arrow Lake from "scaling factor" list (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPPC to get scaling factors (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Rearrange locking in hybrid_init_cpu_capacity_scaling() (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Clear hybrid_max_perf_cpu before driver registration (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Fix energy_performance_preference for passive (David Arcari) [RHEL-85517]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-579.el9]
changelog:
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Li Wang) [RHEL-85318]
  - selftests/mm: va_high_addr_switch: reduce test noise (Li Wang) [RHEL-85318]
  - redhat: spec: fix "unexpected argument to non-parametric macro" warnings (Augusto Caringi)
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Anubhav Shelat) [RHEL-78426]
  - powerpc/pseries: make max polling consistent for longer H_CALLs (Mamatha Inamdar) [RHEL-79919]
  - Fix mmu notifiers for range-based invalidates (Charles Mirabile) [RHEL-83459]
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Jared Kangas) [RHEL-84805] {CVE-2024-58068}
  - OPP: add index check to assert to avoid buffer overflow in _read_freq() (Jared Kangas) [RHEL-81432] {CVE-2024-57998}
  - OPP: Add dev_pm_opp_find_freq_exact_indexed() (Jared Kangas) [RHEL-81432]
  - s390/diag: Move diag.c to diag specific folder (Mete Durlu) [RHEL-72676]
  - s390/diag324: Retrieve power readings via diag 0x324 (Mete Durlu) [RHEL-72676]
  - s390/diag: Create misc device /dev/diag (Mete Durlu) [RHEL-72676]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-81064] {CVE-2024-54456}
  - mei: me: add panther lake P DID (David Arcari) [RHEL-79720]
  - block: fix adding folio to bio (Gavin Shan) [RHEL-79410]
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally (David Arcari) [RHEL-53784]
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly (David Arcari) [RHEL-53784]
  - x86/itmt: Move the "sched_itmt_enabled" sysctl to debugfs (David Arcari) [RHEL-53784]
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD (David Arcari) [RHEL-53784]
  - x86/itmt: Use guard() for itmt_update_mutex (David Arcari) [RHEL-53784]
  - x86/itmt: Convert "sysctl_sched_itmt_enabled" to boolean (David Arcari) [RHEL-53784]
  - perf tools: Fix build-id event recording (Michael Petlan) [RHEL-83537]
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Mamatha Inamdar) [RHEL-81040]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-29207]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-29207]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-29207]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-29207]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-29207]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-29207]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-29207]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-29207]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-29207]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-29207]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-29207]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-29207]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-29207]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-29207]
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CKI Backport Bot) [RHEL-82456] {CVE-2024-58069}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-580.el9]
changelog:
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80054] {CVE-2025-21702}
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_tables: make destruction work queue pernet (Florian Westphal) [RHEL-84577]
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath (Florian Westphal) [RHEL-84577]
  - bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu) [RHEL-84574]
  - bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-84574]
  - bonding: delete always true device check (Hangbin Liu) [RHEL-84574]
  - bonding: add ns target multicast address to slave device (Hangbin Liu) [RHEL-84574]
  - bonding: Pass string literal as format argument of alloc_ordered_workqueue() (Hangbin Liu) [RHEL-84574]
  - scsi: lpfc: Fix spelling mistake 'Toplogy' -> 'Topology' (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.8 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.8 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Reduce log message generation during ELS ring clean up (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add support for large fw object application layer reads (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update definition of firmware configuration mbox cmds (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Dick Kennedy) [RHEL-82146]
  - selftests: net: local_termination: require mausezahn (Hangbin Liu) [RHEL-84591]
  - selftests: forwarding: add a pvid_change test to bridge_vlan_unaware (Hangbin Liu) [RHEL-84591]
  - selftests: tls: add a selftest for wrapping rec_seq (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Test TOS matching with input routes (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative connect tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative match tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Clarify test results (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Remove unused functions (Hangbin Liu) [RHEL-84591]
  - selftests: make order checking verbose in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fix OOM in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add VRF tests (Hangbin Liu) [RHEL-84591]
  - vxlan: check vxlan_vnigroup_init() return value (CKI Backport Bot) [RHEL-81516] {CVE-2025-21790}
  - media: mc: fix endpoint iteration (Kate Hsuan) [RHEL-77308]
  - media: fix secfeed undefined when filter alloc fail (Kate Hsuan) [RHEL-77308]
  - media: docs: Remove extraneous \endgroup from P010 table (Kate Hsuan) [RHEL-77308]
  - media: Fix building pdfdocs (Kate Hsuan) [RHEL-77308]
  - media: Documentation: mc: Replace deprecated graph walk API (Kate Hsuan) [RHEL-77308]
  - media: v4l2-mc: Mark v4l2_pipeline_link_notify() as deprecated (Kate Hsuan) [RHEL-77308]
  - media: videobuf2: Drop minimum allocation requirement of 2 buffers (Kate Hsuan) [RHEL-77308]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-77308]
  - ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-7901]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-7901]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-7901]
  - iomap: make zero range flush conditional on unwritten mappings (Brian Foster) [RHEL-7901]
  - iomap: fix handling of dirty folios over unwritten extents (Brian Foster) [RHEL-7901]
  - ima: Fix potential memory leak in ima_init_crypto() (CKI Backport Bot) [RHEL-80844] {CVE-2022-49627}
  - dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-84906]
  - dm zoned: dynamically allocate the dm-zoned-meta shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm: dynamically allocate the dm-bufio shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84906]
  - dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84906]
  - dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84906]
  - dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84906]
  - dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84906]
  - dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84906]
  - dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84906]
  - dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84906]
  - dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84906]
  - dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84906]
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84906]
  - dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84906]
  - dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84906]
  - dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84906]
  - dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84906]
  - dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84906]
  - dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm verity: fallback to platform keyring also if key in trusted keyring is rejected (Benjamin Marzinski) [RHEL-84906]
  - dm: fix spelling errors (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: remove pointless error check (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use common error handling code in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use up_read() together with key_put() only once in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: check mac_size against HASH_MAX_DIGESTSIZE in sb_mac() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: support recalculation in the 'I' mode (Benjamin Marzinski) [RHEL-40616]
  - dm integrity: Convert comma to semicolon (Benjamin Marzinski) [RHEL-84906]
  - dm: Make use of __assign_bit() API (Benjamin Marzinski) [RHEL-84906]
  - dm integrity: Remove extra unlikely helper (Benjamin Marzinski) [RHEL-84906]
  - dm: Convert to use ERR_CAST() (Benjamin Marzinski) [RHEL-84906]
  - dm bufio: Remove NULL check of list_entry() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Allow to specify the integrity key size as option (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration and empty definition "dm_zone_map_bio" (Benjamin Marzinski) [RHEL-84906]
  - dm delay: enhance kernel documentation (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration dm_get_rq_mapinfo() (Benjamin Marzinski) [RHEL-84906]
  - platform/x86/intel/pmc: Remove unneeded extern keyword in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove unnecessary declarations in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Panther Lake support to intel_pmc_core (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Move arch specific action to init function (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core driver (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove simple init functions (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Create generic_core_init() for all platforms (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove duplicate enum (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Make tgl_core_generic_init() static (David Arcari) [RHEL-20138]
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Davide Caratti) [RHEL-84583]
  - ipvlan: ensure network headers are in skb linear part (Davide Caratti) [RHEL-84583] {CVE-2025-21891}
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Guillaume Nault) [RHEL-84588]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-80386]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-80386]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-80386]
  - mpls: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-85646]
  - ppp: Fix KMSAN uninit-value warning with bpf (Guillaume Nault) [RHEL-85638]
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-45755 RHEL-85593]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85593]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85593]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85593]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85593]
  - vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85593]
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85593]
  - vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85593]
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85593]
  - vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85593]
  - redhat/configs: Disable CONFIG_QAT_VFIO_PCI (Alex Williamson) [RHEL-85593]
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices (Alex Williamson) [RHEL-85593]
  - redhat/configs: disable CONFIG_DRM_WERROR (Eric Chanudet) [RHEL-82507]
  - Revert "nvme_core: scan namespaces asynchronously" (John Meneghini) [RHEL-84361]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-581.el9]
changelog:
  - selftests: livepatch: handle PRINTK_CALLER in check_result() (Denis Aleksandrov) [RHEL-85303]
  - livepatch: convert timeouts to secs_to_jiffies() (Denis Aleksandrov) [RHEL-85303]
  - selftests: livepatch: add test cases of stack_order sysfs interface (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Add stack_order sysfs attribute (Denis Aleksandrov) [RHEL-85303]
  - selftests/livepatch: Replace hardcoded module name with variable in test-callbacks.sh (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Use kallsyms_on_each_match_symbol() to improve performance (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Fix build failure on 32 bits processors (Denis Aleksandrov) [RHEL-85303]
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use more folio in migrate_device_unmap() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert try_to_migrate() to folios (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use a folio in migrate_device_range() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert to migrate_device_coherent_folio() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Rafael Aquini) [RHEL-84184]
  - mm: clear uffd-wp PTE/PMD state on mremap() (Rafael Aquini) [RHEL-80529 RHEL-84184] {CVE-2025-21696}
  - userfaultfd: move userfaultfd_ctx struct to header file (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: remove "prot" parameter from move_pte() (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: open-code page_folio() in dump_page() (Rafael Aquini) [RHEL-84184]
  - mm: open-code PageTail in folio_flags() and const_folio_flags() (Rafael Aquini) [RHEL-84184]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Rafael Aquini) [RHEL-84184] {CVE-2025-21815}
  - mm: fix crashes from deferred split racing folio migration (Rafael Aquini) [RHEL-84184] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Rafael Aquini) [RHEL-84184]
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Rafael Aquini) [RHEL-84184]
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix deadlock in migrate_pages_batch() on large folios (Rafael Aquini) [RHEL-84184]
  - mm/mglru: reset page lru tier bits when activating (Rafael Aquini) [RHEL-84184]
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma (Rafael Aquini) [RHEL-84184]
  - mm: kmemleak: fix upper boundary check for physical address objects (Rafael Aquini) [RHEL-84184]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Rafael Aquini) [RHEL-84184]
  - mm, madvise: fix potential workingset node list_lru leaks (Rafael Aquini) [RHEL-84184]
  - mm: move mapping_set_update out of <linux/swap.h> (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix shmem xarray update during migration (Rafael Aquini) [RHEL-84184]
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled. (Rafael Aquini) [RHEL-84184]
  - memory tiering: read last_cpupid correctly in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-84184]
  - nommu: pass NULL argument to vma_iter_prealloc() (Rafael Aquini) [RHEL-84184] {CVE-2024-53109}
  - cachestat: fix page cache statistics permission checking (Rafael Aquini) [RHEL-78989 RHEL-84184] {CVE-2025-21691}
  - kernel: be more careful about dup_mmap() failures and uprobe registering (Rafael Aquini) [RHEL-84184] {CVE-2025-21709}
  - fork: avoid inappropriate uprobe access to invalid mm (Rafael Aquini) [RHEL-84184]
  - s390/pageattr: Implement missing kernel_page_present() (Rafael Aquini) [RHEL-84184]
  - x86/mm: further clarify switch_mm_irqs_off() documentation (Rafael Aquini) [RHEL-84184]
  - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors (Rafael Aquini) [RHEL-84184]
  - x86/kvm: Fix SEV check in sev_map_percpu_data() (Rafael Aquini) [RHEL-84184]
  - um: Fix the declaration of kasan_map_memory (Rafael Aquini) [RHEL-84184]
  - of: reserved-memory: Do not make kmemleak ignore freed address (Rafael Aquini) [RHEL-84184]
  - scripts/gdb: redefine MAX_ORDER sanely (Rafael Aquini) [RHEL-84184]
  - kasan: don't call find_vm_area() in a PREEMPT_RT kernel (Rafael Aquini) [RHEL-84184]
  - kasan: fix typo in kasan_poison_new_object documentation (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried region directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: avoid divide-by-zero during monitoring results update (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: fix quota status loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/reclaim: fix quota stauts loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: check error from damon_sysfs_update_target() (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: update monitoring target regions for online input commit (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: remove requested targets when online-commit inputs (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix damon_test_ops_registration() for DAMON_VADDR unset case (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: test only vaddr case on ops registration test (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_ctx() (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_init_regions() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_targets() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: make damon_start() waits until kdamond_fn() starts (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: use number of passed access sampling as a timer (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: fix return value from damos_wmark_metric_value (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: remove unnecessary si_meminfo invoke. (Rafael Aquini) [RHEL-84184]
  - mm/damon/ops-common: avoid divide-by-zero during region hotness calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon: implement a function for max nr_accesses safe calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/dbgfs-kunit: fix the header double inclusion guarding ifdef comment (Rafael Aquini) [RHEL-84184]
  - mm/damon: fix sparse warning for zero initializer (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/vaddr-kunit: init maple tree without MT_FLAGS_LOCK_EXTERN (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (Rafael Aquini) [RHEL-84184]
  - ptp: Properly handle compat ioctls (Hangbin Liu) [RHEL-85028]
  - ptp: Ensure info->enable callback is always set (Hangbin Liu) [RHEL-85028] {CVE-2025-21814}
  - ptp: fix integer overflow in max_vclocks_store (Hangbin Liu) [RHEL-85028]
  - ptp: make ptp_class constant (Hangbin Liu) [RHEL-85028]
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [RHEL-33329] {CVE-2025-21926}
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88002]
  - lib/iov_iter: fix import_iovec_ubuf iovec management (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_iovec_from_user() noclone (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_compat_iovec_from_user() noinline (Ming Lei) [RHEL-87739]
  - iov_iter: import single vector iovecs as ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: convert import_single_range() to ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: set nr_segs = 1 for ITER_UBUF (Ming Lei) [RHEL-87739]
  - redhat: Remove kernel-rt-kvm package (Wander Lairson Costa) [RHEL-76757]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-87767]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-87767]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-87767]
  - s390/diag: Add memory topology information via diag310 (Mete Durlu) [RHEL-72683]
  - net: let net.core.dev_weight always be non-zero (CKI Backport Bot) [RHEL-81686] {CVE-2025-21806}
  - sched: Fix stop_one_cpu_nowait() vs hotplug (Luis Claudio R. Goncalves) [RHEL-84526]
  - x86/tdx: Fix "in-kernel MMIO" check (Vitaly Kuznetsov) [RHEL-63318] {CVE-2024-47727}
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Desnes Nunes) [RHEL-78828 RHEL-81547] {CVE-2024-57981}
  - usb: xhci: Fix host controllers "dying" after suspend and resume (Desnes Nunes) [RHEL-78828]
  - acpi: typec: ucsi: Introduce a ->poll_cci method (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: make yoga_c630_ucsi_ops be static (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix deadlock during uvc_probe (Desnes Nunes) [RHEL-78828] {CVE-2024-58059}
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Desnes Nunes) [RHEL-78828] {CVE-2024-58079}
  - media: uvcvideo: Reorder uvc_status_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Neoway N723-EA support (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SRM815 (Desnes Nunes) [RHEL-78828]
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Desnes Nunes) [RHEL-78828]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (Desnes Nunes) [RHEL-78828]
  - usb-storage: Add max sectors quirk for Nokia 208 (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Desnes Nunes) [RHEL-78828]
  - USB: core: Disable LPM only for non-suspended ports (Desnes Nunes) [RHEL-78828]
  - usb: fix reference leak in usb_new_device() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpci: fix NULL pointer issue on shared irq case (Desnes Nunes) [RHEL-78828] {CVE-2024-57914}
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Desnes Nunes) [RHEL-78828]
  - USB: usblp: return error when setting unsupported protocol (Desnes Nunes) [RHEL-78828]
  - usb: host: xhci-plat: set skip_phy_initialization if software node has XHCI_SKIP_PHY_INIT property (Desnes Nunes) [RHEL-78828]
  - usb: xhci: fix ring expansion regression in 6.13-rc1 (Desnes Nunes) [RHEL-78828]
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Improve redrive mode handling (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MediaTek T7XX compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SLM770A (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add TCL IK512 MBIM & ECM (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't display nvm_version unless upgrade supported (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Add support for Intel Panther Lake-M/P (Desnes Nunes) [RHEL-47432 RHEL-78828]
  - usb: typec: ucsi: Fix connector status writing past buffer size (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix completion notifications (Desnes Nunes) [RHEL-78828]
  - usb: misc: onboard_usb_dev: skip suspend/resume sequence for USB5744 SMBus support (Desnes Nunes) [RHEL-78828]
  - usb: core: hcd: only check primary hcd skip_phy_initialization (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: imx8mp: fix software node kernel dump (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: correct reference to usb-switch.yaml (Desnes Nunes) [RHEL-78828]
  - usb: ehci-hcd: fix call balance of clocks handling routines (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for sink-bc12-completion-time-ms DT property (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add time property for Sink BC12 detection completion (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_device_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: properly lock dynamic id list when showing an id (Desnes Nunes) [RHEL-78828]
  - USB: make single lock for all usb dynamic id lists (Desnes Nunes) [RHEL-78828]
  - drivers/usb/storage: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/serial: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/musb: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/mon: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/misc: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/host: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/core: refactor max with max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/gadget: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - usb: cdns3: Synchronise PCI IDs via common data base (Desnes Nunes) [RHEL-78828]
  - sub: cdns3: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - sub: cdns2: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_USB_CDNS2_UDC (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Add main part of Cadence USBHS driver (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Device side header file for CDNS2 driver (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: core: Set force_gen1 bit for all applicable SuperSpeed ports (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Refine the logic for resizing Tx FIFOs (Desnes Nunes) [RHEL-78828]
  - USB: core: remove dead code in do_proc_bulk() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: imx: add imx8ulp support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix a missing bits to bytes conversion in ucsi_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Replace deprecated PCI functions (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Convert connector specific commands to bitmaps (Desnes Nunes) [RHEL-78828]
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Desnes Nunes) [RHEL-78828]
  - USB: serial: pl2303: account for deficits of clones (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Limit Stop Endpoint retries (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove irrelevant comment (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add help function xhci_dequeue_td() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_td_cleanup() to return void (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove unused arguments from td_to_noop() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: improve xhci_clear_command_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: request MSI/-X according to requested amount (Desnes Nunes) [RHEL-78828]
  - usb: xhci: move link TRB quirk to xhci_gen_setup() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: simplify TDs start and end naming scheme in struct 'xhci_td' (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Fix indentation in the PCI device ID definitions (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Use standard pattern for device IDs (Desnes Nunes) [RHEL-78828]
  - xhci: Don't perform Soft Retry for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Fix control transfer error on Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Don't issue Reset Device command to Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Combine two if statements for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add xhci_initialize_ring_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_link_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_link_rings() to use source and destination rings (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_free_segments_for_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: adjust xhci_alloc_segments_for_ring() arguments (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove option to change a default ring's TRB cycle bit (Desnes Nunes) [RHEL-78828]
  - usb: xhci: introduce macro for ring segment list iteration (Desnes Nunes) [RHEL-78828]
  - xhci: debugfs: Add virt endpoint state to xhci debugfs (Desnes Nunes) [RHEL-78828]
  - xhci: trace stream context at Set TR Deq command completion (Desnes Nunes) [RHEL-78828]
  - xhci: add stream context tracing (Desnes Nunes) [RHEL-78828]
  - xhci: Don't trace ring at every enqueue or dequeue increase (Desnes Nunes) [RHEL-78828]
  - xhci: show DMA address of TRB when tracing TRBs (Desnes Nunes) [RHEL-78828]
  - xhci: Cleanup Candence controller PCI device and vendor ID usage (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix sum_trb_lengths() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Remove unused parameters of next_trb() (Desnes Nunes) [RHEL-78828]
  - xhci: Add Isochronous TRB fields to TRB tracer (Desnes Nunes) [RHEL-78828]
  - phy: tegra: xusb: Set fwnode for xusb port devices (Desnes Nunes) [RHEL-78828]
  - usb: Use (of|device)_property_present() for non-boolean properties (Desnes Nunes) [RHEL-78828]
  - misc: rtsx: Cleanup on DRV_NAME cardreader variables (Desnes Nunes) [RHEL-78828]
  - usb: use "prompt" instead of "bool" for choice prompts (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_TUSB1046 (Desnes Nunes) [RHEL-78828]
  - usb: typec: mux: Add support for the TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - MAINTAINERS: Drop myself as maintainer of TYPEC port controller drivers (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: Describe TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - USB: xhci: add support for PWRON active high (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: add TUSB73x0 PCIe (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement asymmetric lane margining (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Don't hardcode margining results size (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Refactor hardware margining result parsing (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace margining lane numbers with an enum (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace "both lanes" with "all lanes" (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement Gen 4 margining eye selection (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Add USB4 Gen 4 margining capabilities (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't hardcode margining capabilities size (Desnes Nunes) [RHEL-78828]
  - usb: core: use sysfs_emit() instead of sprintf() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for parsing time dt properties (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add properties to define time values (Desnes Nunes) [RHEL-78828]
  - usb: storage: fix wrong comments for struct bulk_cb_wrap (Desnes Nunes) [RHEL-78828]
  - usb: storage: use US_BULK_FLAG_OUT instead of constant values (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Helper for Get Connector Status command (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Remove some deadcode (Desnes Nunes) [RHEL-78828]
  - media: usb: drop vb2_ops_wait_prepare/finish (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Stop stream during unregister (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: mxs-usb-phy: add imx8qxp compatible (Desnes Nunes) [RHEL-78828]
  - xhci: add helper to stop endpoint and wait for completion (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Add support for the partner USB Modes (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: ucsi: Supply the USB capabilities to the ports (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the USB Modes of the partner (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the supported USB modes of the port (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: require FMODE_WRITE for usbdev_mmap() (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: UCSI2.0 Set Sink Path command support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations (Desnes Nunes) [RHEL-78828]
  - memstick: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Fix the S-Video capture on August VGB100 (Desnes Nunes) [RHEL-78828]
  - media: pvrusb2: Use kmemdup_array instead of kmemdup for multiple allocation (Desnes Nunes) [RHEL-78828]
  - media: pwc: set lock before calling vb2_queue_init() (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Exit early if there is not int_urb (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Avoid race condition during unregister (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Refactor the status irq API (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Require entities to have a non-zero unique ID (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033 (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add support for the D3DFMT_R5G6B5 pixmap type (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: RealSense D421 Depth module metadata (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y14P format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y12P format (Desnes Nunes) [RHEL-78828]
  - media: Add Y012 video format (Desnes Nunes) [RHEL-78828]
  - media: uapi: Add IPU3 packed Y10 format (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: dwc3-imx8mp: add compatible string for imx95 (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: add compatible "fsl,imx95-usb-phy" (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: fail open after removal (Desnes Nunes) [RHEL-78828]
  - usb: yurex: make waiting on yurex_write interruptible (Desnes Nunes) [RHEL-78828]
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve error recovery for ISO transfer (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: Add revision check of 2.20[CI_REVISION_22] (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve dTD link logic (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: limit usb request length to max 16KB (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: cypress,cypd4226: Drop Tegra specific GPIO defines (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: genesys,gl850g: allow downstream device subnodes (Desnes Nunes) [RHEL-78828]
  - usb: typec: stusb160x: Make use of i2c_get_match_data() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: use max() to get higher value (Desnes Nunes) [RHEL-78828]
  - usb: atm: Correct some typos (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: Correct some typos in comments (Desnes Nunes) [RHEL-78828]
  - usb: typec: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - usb: host: fix typo in the comment (Desnes Nunes) [RHEL-78828]
  - staging: octeon-usb: move driver out of staging (Desnes Nunes) [RHEL-78828]
  - ipc/sem: use flexible array in 'struct sem_undo' (Rafael Aquini) [RHEL-83456]
  - mqueue: convert to ctime accessor functions (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: batch free ipc_namespace structures (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: make ipc namespace allocation wait for pending free (Rafael Aquini) [RHEL-83456]
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Rafael Aquini) [RHEL-83456]
  - ipc: mqueue: remove unnecessary conditionals (Rafael Aquini) [RHEL-83456]
  - ipc/util.c: cleanup and improve sysvipc_find_ipc() (Rafael Aquini) [RHEL-83456]
  - ipc/mqueue: remove unnecessary (void*) conversion (Rafael Aquini) [RHEL-83456]
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Rafael Aquini) [RHEL-83456] {CVE-2024-53175}
  - ipc: Free mq_sysctls if ipc namespace creation failed (Rafael Aquini) [RHEL-83456]
  - ipc: update semtimedop() to use hrtimer (Rafael Aquini) [RHEL-83456]
  - ipc/sem: remove redundant assignments (Rafael Aquini) [RHEL-83456]
  - ipc/sem: do not sleep with a spin lock held (Rafael Aquini) [RHEL-83456]
  - shm: extend forced shm destroy to support objects from several IPC nses (Rafael Aquini) [RHEL-83456]
  - ipc: WARN if trying to remove ipc object which is absent (Rafael Aquini) [RHEL-83456]
  - ARM: 9114/1: oabi-compat: rework sys_semtimedop emulation (Rafael Aquini) [RHEL-83456]
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CKI Backport Bot) [RHEL-81457] {CVE-2025-21738}
  - platform/x86/intel/vsec: Add Diamond Rapids support (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Add support for Panther Lake (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Remove a useless mutex (David Arcari) [RHEL-47412]
  - cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-83455]
  - cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-83455]
  - Union-Find: add a new module in kernel library (Waiman Long) [RHEL-83455]
  - scsi: core: Clear driver private data when retrying request (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Do not retry I/Os during depopulation (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Ewan D. Milne) [RHEL-86156]
  - scsi: transport: sas: spi: Fix kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_scan: Add kernel-doc for exported function (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_lib: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_ioctl: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_error: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Skip host/bus reset settle delay (Ewan D. Milne) [RHEL-86156]
  - scsi: Eliminate scsi_register() and scsi_unregister() usage & docs (Ewan D. Milne) [RHEL-86156]
  - scsi: docs: Remove init_this_scsi_driver() (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix hrtimer support for ndelay (Ewan D. Milne) [RHEL-86156]
  - scsi: bsg: Replace zero-length array with flexible array member (Ewan D. Milne) [RHEL-86156]
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Maintain write statistics per group number (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement GET STREAM STATUS (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement the IO Advice Hints Grouping mode page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Allocate the MODE SENSE response from the heap (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework subpage code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework page code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Support the block limits extension VPD page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Reduce code duplication (Ewan D. Milne) [RHEL-86156]
  - treewide: Switch/rename to timer_delete[_sync]() (Tony Camuso) [RHEL-82121]
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (Tony Camuso) [RHEL-82121]
  - ipmi: make ipmi_destroy_user() return void (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix a not-used variable on a non-ACPI system (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix the wrong format specifier (Tony Camuso) [RHEL-82121]
  - [tree-wide] finally take no_llseek out (Tony Camuso) [RHEL-82121]
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Tony Camuso) [RHEL-82121]
  - ipmi:ssif: Improve detecting during probing (Tony Camuso) [RHEL-82121]
  - ipmi: ipmi_ssif: fix module autoloading (Tony Camuso) [RHEL-82121]
  - RDMA/efa: Align interrupt related fields to same type (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Reset device on probe failure (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Report link speed according to device attributes (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Add option to set QP service level on create (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Update device interface (Kamal Heib) [RHEL-83223]
  - rtla/tests: Test setting default options (Tomas Glozar) [RHEL-86051]
  - rtla/tests: Reset osnoise options before check (Tomas Glozar) [RHEL-86051]
  - rtla: Always set all tracer options (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Set OSNOISE_WORKLOAD to true (Tomas Glozar) [RHEL-86051]
  - rtla: Unify apply_config between top and hist (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Unify params struct (Tomas Glozar) [RHEL-86051]
  - redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar) [RHEL-77358]
  - tools/build: Use SYSTEM_BPFTOOL for system bpftool (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Test BPF mode (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Move divisor to update (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_hist: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Add BPF skeleton to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla: Add optional dependency on BPF tooling (Tomas Glozar) [RHEL-77358]
  - tools/build: Add bpftool-skeletons feature test (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Unify params struct (Tomas Glozar) [RHEL-77358]
  - trace/osnoise: Add trace events for samples (Tomas Glozar) [RHEL-77358]
  - tools/rtla: Add basic test suite (Tomas Glozar) [RHEL-77358]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CKI Backport Bot) [RHEL-82701] {CVE-2025-21839}
  - watch_queue: fix pipe accounting mismatch (Carlos Maiolino) [RHEL-78249]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-79765]
  - tools/rv: Keep user LDFLAGS in build (Tomas Glozar) [RHEL-82810]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-582.el9]
changelog:
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-88093]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-68940]
  - x86: Add missing code to arch/x86/include/asm/linkage.h (Waiman Long) [RHEL-68940]
  - jump_label: Fix static_key_slow_dec() yet again (Waiman Long) [RHEL-68940]
  - jump_label: Fix the fix, brown paper bags galore (Waiman Long) [RHEL-68940]
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (Waiman Long) [RHEL-68940]
  - jump_label: Clarify condition in static_key_fast_inc_not_disabled() (Waiman Long) [RHEL-68940]
  - jump_label: Fix concurrency issues in static_key_slow_dec() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use the correct length when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sort local vars in apply_alternatives() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Optimize optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Get rid of __optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use a temporary buffer when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Catch late X86_FEATURE modifiers (Waiman Long) [RHEL-68940]
  - x86/percpu: Use __force to cast from __percpu address space (Waiman Long) [RHEL-68940]
  - x86/percpu: Unify arch_raw_cpu_ptr() defines (Waiman Long) [RHEL-68940]
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys (Waiman Long) [RHEL-68940]
  - x86/bpf: Fix IP for relocating call depth accounting (Waiman Long) [RHEL-68940]
  - x86/alternatives: Move apply_relocation() out of init section (Waiman Long) [RHEL-68940]
  - x86/percpu: Avoid sparse warning with cast to named address space (Waiman Long) [RHEL-68940]
  - x86/traps: Use current_top_of_stack() helper in traps.c (Waiman Long) [RHEL-68940]
  - x86/percpu: Fix "const_pcpu_hot" version generation failure (Waiman Long) [RHEL-68940]
  - x86/callthunks: Correct calculation of dest address in is_callthunk() (Waiman Long) [RHEL-68940]
  - x86/smp: Use atomic_try_cmpxchg in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/smp: Move the call to smp_processor_id() after the early exit in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/percpu: Declare const_pcpu_hot as extern const variable (Waiman Long) [RHEL-68940]
  - x86/paravirt: Remove no longer needed paravirt patching code (Waiman Long) [RHEL-68940]
  - x86/callthunks: Mark apply_relocation() as __init_or_module (Waiman Long) [RHEL-68940]
  - x86/callthunks: Fix and unify call thunks assembly snippets (Waiman Long) [RHEL-68940]
  - x86/callthunks: Handle %rip-relative relocations in call thunk template (Waiman Long) [RHEL-68940]
  - x86/percpu: Define PER_CPU_VAR macro also for !__ASSEMBLY__ (Waiman Long) [RHEL-68940]
  - x86/percpu: Return correct variable from current_top_of_stack() (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce const-qualified const_pcpu_hot to micro-optimize code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce %rip-relative addressing to PER_CPU_VAR() (Waiman Long) [RHEL-68940]
  - x86/percpu, xen: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/percpu: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/fpu: Clean up FPU switching in the middle of task switching (Waiman Long) [RHEL-68940]
  - x86/percpu: Use the correct asm operand modifier in percpu_stable_op() (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for arch_raw_cpu_ptr(), to improve code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Rewrite arch_raw_cpu_ptr() to be easier for compilers to optimize (Waiman Long) [RHEL-68940]
  - x86/percpu: Disable named address spaces for KASAN (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for percpu read/write accessors (Waiman Long) [RHEL-68940]
  - x86/percpu: Use compiler segment prefix qualifier (Waiman Long) [RHEL-68940]
  - x86/percpu: Enable named address spaces with known compiler version (Waiman Long) [RHEL-68940]
  - x86/callthunks: Use EXPORT_PER_CPU_SYMBOL_GPL() for per CPU variables (Waiman Long) [RHEL-68940]
  - x86/paravirt: Make BUG_func() usable by non-GPL modules (Waiman Long) [RHEL-68940]
  - x86/alternative: Correct feature bit debug output (Waiman Long) [RHEL-68940]
  - x86/paravirt: Switch mixed paravirt/alternative calls to alternatives (Waiman Long) [RHEL-68940]
  - x86/alternative: Add indirect call patching (Waiman Long) [RHEL-68940]
  - x86/paravirt: Move some functions and defines to alternative.c (Waiman Long) [RHEL-68940]
  - x86/paravirt: Introduce ALT_NOT_XEN (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sync core before enabling interrupts (Waiman Long) [RHEL-68940]
  - arch: Remove cmpxchg_double (Waiman Long) [RHEL-68940]
  - x86,intel_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - x86,amd_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - locking/atomic: Correct (cmp)xchg() instrumentation (Waiman Long) [RHEL-68940]
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Waiman Long) [RHEL-68940]
  - jump_label: Prevent key->enabled int overflow (Waiman Long) [RHEL-68940]
  - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() (Waiman Long) [RHEL-68940]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57031]
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Hangbin Liu) [RHEL-84573]
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Hangbin Liu) [RHEL-84573] {CVE-2025-22005}
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Hangbin Liu) [RHEL-84573]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Hangbin Liu) [RHEL-84573] {CVE-2025-21768}
  - inet: ipmr: fix data-races (Hangbin Liu) [RHEL-84573]
  - perf script: Fix hangup in offline flamegraph report (Anubhav Shelat) [RHEL-87957]
  - perf script: force stdin for flamegraph in live mode (Anubhav Shelat) [RHEL-87957]
  - locking/lockdep: Add kasan_check_byte() check in lock_acquire() (Waiman Long) [RHEL-81997]
  - locking/lockdep: Disable KASAN instrumentation of lockdep.c (Waiman Long) [RHEL-81997]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74483] {CVE-2024-54191}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74483]
  - net: Make copy_safe_from_sockptr() match documentation (Bastien Nocera) [RHEL-74483]
  - net: add copy_safe_from_sockptr() helper (Bastien Nocera) [RHEL-74483]
  - net/tcp: Introduce TCP_AO setsockopt()s [partial] (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74483]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74483]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74483]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Jakub Brnak) [RHEL-83785]
  - perf annotate: Add annotation_options.disassembler_used (Jakub Brnak) [RHEL-83785]
  - perf annotate: Use an array for the disassembler preference (Jakub Brnak) [RHEL-83785]
  - perf disasm: Allow configuring what disassemblers to use (Jakub Brnak) [RHEL-83785]
  - perf disasm: Define stubs for the LLVM and capstone disassemblers (Jakub Brnak) [RHEL-83785]
  - perf disasm: Introduce symbol__disassemble_objdump() (Jakub Brnak) [RHEL-83785]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87474]
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87474]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87474]
  - iomap: add a workaround for racy i_size updates on block devices (CKI Backport Bot) [RHEL-79099]
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87163]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87163]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84590]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84590]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - scsi: fnic: Remove unnecessary NUL-terminations (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant flush_workqueue() calls (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (Karan Kumar) [RHEL-64440]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move flush_work initialization out of if block (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove usage of host_lock (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and improve log messages (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and use fnic number (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify definitions to sync with VIC firmware (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return error if vmalloc() failed (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix sg_reset success path (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace sgreset tag with max_tag_id (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vzalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unneeded flush_workqueue() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant NULL check (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Stop using the SCSI pointer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix a tracing statement (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Call scsi_done() directly (Karan Kumar) [RHEL-64440]
  - tools/power turbostat: v2025.05.06 (David Arcari) [RHEL-86839]
  - tools/power turbostat: disable "cpuidle" invocation counters, by default (David Arcari) [RHEL-86839]
  - tools/power turbostat: re-factor sysfs code (David Arcari) [RHEL-86839]
  - tools/power turbostat: Restore GFX sysfs fflush() call (David Arcari) [RHEL-86839]
  - tools/power turbostat: Document GNR UncMHz domain convention (David Arcari) [RHEL-86839]
  - tools/power turbostat: report CoreThr per measurement interval (David Arcari) [RHEL-86839]
  - tools/power turbostat: Increase CPU_SUBSET_MAXCPUS to 8192 (David Arcari) [RHEL-86839]
  - tools/power turbostat: Add idle governor statistics reporting (David Arcari) [RHEL-86839]
  - tools/power turbostat: Fix names matching (David Arcari) [RHEL-86839]
  - tools/power turbostat: Allow Zero return value for some RAPL registers (David Arcari) [RHEL-86839]
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (David Arcari) [RHEL-86839]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [RHEL-45087]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Update documentation with image download path (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Fix SBAF title underline length (David Arcari) [RHEL-45087]
  - trace: platform/x86/intel/ifs: Add SBAF trace support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test image loading support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Disable irq during one load stage (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Classify error scenarios correctly (David Arcari) [RHEL-45087]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - RDMA/mlx5: Fix implicit ODP use after free (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86518]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [RHEL-83031]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-86674]
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-72652 RHEL-76569 RHEL-80075]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83075]
  - igb: Fix potential invalid memory access in igb_init_module() (CKI Backport Bot) [RHEL-73651] {CVE-2024-52332}
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-21925]
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - Enable X86_USER_SHADOW_STACK (Štěpán Horáček) [RHEL-15599]
  - mm: don't try THP alignment for FS without get_unmapped_area (Štěpán Horáček) [RHEL-15599]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Štěpán Horáček) [RHEL-15599]
  - mm: care about shadow stack guard gap when getting an unmapped area (Štěpán Horáček) [RHEL-15599]
  - mm: pass vm_flags to generic_get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: make arch_get_unmapped_area() take vm_flags by default (Štěpán Horáček) [RHEL-15599]
  - x86/mm: care about shadow stack guard gap during placement (Štěpán Horáček) [RHEL-15599]
  - x86/mm: implement HAVE_ARCH_UNMAPPED_AREA_VMFLAGS (Štěpán Horáček) [RHEL-15599]
  - mm: take placement mappings gap into account (Štěpán Horáček) [RHEL-15599]
  - treewide: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - powerpc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - parisc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - csky: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - thp: add thp_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: use get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: remove export for get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: introduce arch_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: switch mm->get_unmapped_area() to a flag (Štěpán Horáček) [RHEL-15599]
  - proc: refactor pde_get_unmapped_area as prep (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: add placement guard gap test for shstk (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Enable shadow stacks for x32 (Štěpán Horáček) [RHEL-15599]
  - arch: Reserve map_shadow_stack() syscall number for all architectures (Štěpán Horáček) [RHEL-15599]
  - mm: thp_get_unmapped_area must honour topdown preference (Štěpán Horáček) [RHEL-15599]
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (Štěpán Horáček) [RHEL-15599]
  - mm: align larger anonymous mappings on THP boundaries (Štěpán Horáček) [RHEL-15599]
  - alpha: Fix up new futex syscall numbers (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add warning for shadow stack double unmap (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: Update map_shadow_stack syscall nr (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Change order of __user in type (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Don't retry vm_munmap() on -EINTR (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_STATUS (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_UNLOCK (Štěpán Horáček) [RHEL-15599]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - do not request interrupt on cmd completion when irqs disabled (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Remove unused declaration sp_get_master() (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add additional information about an SEV firmware upgrade (Vladis Dronov) [RHEL-85131]
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add the SNP_VLEK_LOAD command (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move message about TSME being enabled later in init (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for getting security attributes on some older systems (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - align psp_platform_access_msg (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move security attributes to their own file (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Represent capabilities register as a union (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - drop platform ifdef checks (Vladis Dronov) [RHEL-85131]
  - crypto: tools/ccp - Remove unused variable (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Update return values for some unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix some unfused tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix sample application signature passing (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix DBC sample application error handling (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix ioctl unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add Mario to MAINTAINERS (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add unit tests for dynamic boost control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample python script for Dynamic Boost Control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample library for ioctl use (Vladis Dronov) [RHEL-85131]
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CKI Backport Bot) [RHEL-83191] {CVE-2025-21847}
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69423]
  - firmware: arm_scpi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scpi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-65607]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Steve Dunnagan) [RHEL-65607]
  - firmware/psci: Add definitions for PSCI v1.3 specification (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Report duplicate opps as firmware bugs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Skip opp duplicates (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() implementations (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Reject clear channel request on A2P (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Give SMC transport precedence over mailbox (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Steve Dunnagan) [RHEL-65607]
  - redhat/configs: Add SCMI configs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX MISC protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX BBM protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add NXP i.MX95 SCMI documentation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace comma with the semicolon (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace the use of of_node_put() to __free(device_node) (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix trivial whitespace/coding style issues (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max-rx-timeout-ms from devicetree (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove const from transport descriptors (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Simplify with scoped for each OF child loop (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Update various protocols versions (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove legacy transport-layer code (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make VirtIO transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make OPTEE transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make SMC transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make MBOX transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for standalone transport drivers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce packet handling helpers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce setup_shmem_iomap (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in OPTEE transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix voltage description in failure cases (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support to reset the debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Create debugfs files for SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Track basic SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for debug metrics at the interface (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove superfluous handle_to_scmi_info (Steve Dunnagan) [RHEL-65607]
  - firmware/smccc: Call arch-specific hook on discovering KVM services (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for platform to agent channel completion (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for system suspend in power control driver (Steve Dunnagan) [RHEL-65607]
  - firmware: smccc: Export revision soc_id function (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Avoid non-constant printk format strings (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use dev_err_probe to bail out (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix struct kernel-doc warnings in optee transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make scmi_bus_type const (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add multiple protocols registration support (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace asm-generic/bug.h with linux/bug.h (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - pmdomain: arm_scmi: Move Kconfig options to the pmdomain subsystem (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-69477]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68440]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68440]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68440]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68440]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68440]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68440]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-61633]
  - Resolves: RHEL-69477
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel9.6)
  - Resolves: RHEL-68440
    (The new "boot order" feature is sometimes not working as expected [RHEL 9])
  - Resolves: RHEL-61633
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-66089]
  - Resolves: RHEL-66089
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-50212]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-50212]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-50212]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-50212]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71940]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-27832]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67107]
  - Resolves: RHEL-50212
    ([IBM 9.6 FEAT] KVM: CPU model for new IBM Z HW - qemu part)
  - Resolves: RHEL-71940
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-27832
    (The post-copy migration of RT-VM leads to race while accessing vhost-user device and hung/stalled target VM)
  - Resolves: RHEL-67107
    ([aarch64] [rhel-9.6] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-39948]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-39948]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-39948]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-39948]
  - Resolves: RHEL-39948
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-53073]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73688]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-52278]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-56340]
  - Resolves: RHEL-53073
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9)
  - Resolves: RHEL-73688
    (VM crashes when requesting domstats)
  - Resolves: RHEL-52278
    (fsfreeze hooks doesn't log error on system logs when running hook fails)
  - Resolves: RHEL-56340
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-11
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65616]
  - Resolves: RHEL-65616
    (Failed to hot add PCIe device behind xio3130 downstream port)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-12
changelog:
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30316 RHEL-45111]
  - kvm-arm-disable-pauth-for-virt-rhel9.patch [RHEL-75782]
  - kvm-tests-qtest-disable-most-pauth-tests.patch [RHEL-75782]
  - Resolves: RHEL-30316
    ([Intel 9.6 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45111
    ([Intel 9.6 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)
  - Resolves: RHEL-75782
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-13
changelog:
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72716]
  - Resolves: RHEL-72716
    (Boot fall back to cdrom from network not always working)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-14
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-67863]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78372]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78372]
  - Resolves: RHEL-67863
    (Ensure qemu as NBD server does not flood logs [rhel 9.6])
  - Resolves: RHEL-78372
    (Add vhost-user internal migration for passt [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73891]
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54296 RHEL-78397]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54296 RHEL-78397]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - Resolves: RHEL-73891
    (No RARP packets on the destination after migration [rhel-9.6])
  - Resolves: RHEL-54296
    (Provide QMP command for block device reactivation after migration [rhel-9.5])
  - Resolves: RHEL-78397
    (backport fix for double migration of a paused VM (disk activation rewrite))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-16
changelog:
  - kvm-hw-virtio-virtio-iommu-Migrate-to-3-phase-reset.patch [RHEL-7188]
  - kvm-hw-i386-intel-iommu-Migrate-to-3-phase-reset.patch [RHEL-7188]
  - kvm-hw-arm-smmuv3-Move-reset-to-exit-phase.patch [RHEL-7188]
  - kvm-hw-vfio-common-Add-a-trace-point-in-vfio_reset_handl.patch [RHEL-7188]
  - kvm-docs-devel-reset-Document-reset-expectations-for-DMA.patch [RHEL-7188]
  - kvm-qga-implement-a-guest-get-load-command.patch [RHEL-69622]
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69775]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-47340]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-47340]
  - Resolves: RHEL-7188
    ([intel iommu][PF] DMAR: DRHD: handling fault status reg)
  - Resolves: RHEL-69622
    ([qemu-guest-agent][RFE] Report CPU load average)
  - Resolves: RHEL-69775
    (Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-47340
    ([Qemu RHEL-9] qemu-trace-stap should handle lack of stap more gracefully)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-17
changelog:
  - kvm-hw-pci-Rename-has_power-to-enabled.patch [RHEL-7301]
  - kvm-hw-pci-Basic-support-for-PCI-power-management.patch [RHEL-7301]
  - kvm-pci-Use-PCI-PM-capability-initializer.patch [RHEL-7301]
  - kvm-vfio-pci-Delete-local-pm_cap.patch [RHEL-7301]
  - kvm-pcie-virtio-Remove-redundant-pm_cap.patch [RHEL-7301]
  - kvm-hw-vfio-pci-Re-order-pre-reset.patch [RHEL-7301]
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-47340]
  - Resolves: RHEL-7301
    ([intel iommu] VFIO_MAP_DMA failed: Bad address on system_powerdown)
  - Resolves: RHEL-47340
    ([Qemu RHEL-9] qemu-trace-stap should handle lack of stap more gracefully)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-18
changelog:
  - kvm-virtio-kconfig-memory-devices-are-PCI-only.patch [RHEL-72977]
  - kvm-hw-s390-ccw-device-Convert-to-three-phase-reset.patch [RHEL-72977]
  - kvm-hw-s390-virtio-ccw-Convert-to-three-phase-reset.patch [RHEL-72977]
  - kvm-target-s390-Convert-CPU-to-Resettable-interface.patch [RHEL-72977]
  - kvm-reset-Use-ResetType-for-qemu_devices_reset-and-Machi.patch [RHEL-72977]
  - kvm-reset-Add-RESET_TYPE_WAKEUP.patch [RHEL-72977]
  - kvm-virtio-mem-Use-new-Resettable-framework-instead-of-L.patch [RHEL-72977]
  - kvm-virtio-mem-Add-support-for-suspend-wake-up-with-plug.patch [RHEL-72977]
  - kvm-virtio-mem-unplug-memory-only-during-system-resets-n.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-don-t-crash-on-weird-RAM-sizes.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-hcall-remove-hypercall-registratio.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-hcall-prepare-for-more-diag500-hyp.patch [RHEL-72977]
  - kvm-s390x-rename-s390-virtio-hcall-to-s390-hypercall.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-move-setting-the-maximum-guest.patch [RHEL-72977]
  - kvm-s390x-introduce-s390_get_memory_limit.patch [RHEL-72977]
  - kvm-s390x-s390-hypercall-introduce-DIAG500-STORAGE_LIMIT.patch [RHEL-72977]
  - kvm-s390x-s390-stattrib-kvm-prepare-for-memory-devices-a.patch [RHEL-72977]
  - kvm-s390x-s390-skeys-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-pv-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-remember-the-maximum-page-size.patch [RHEL-72977]
  - kvm-s390x-virtio-ccw-add-support-for-virtio-based-memory.patch [RHEL-72977]
  - kvm-s390x-virtio-mem-support.patch [RHEL-72977]
  - kvm-hw-virtio-Also-include-md-stubs-in-case-CONFIG_VIRTI.patch [RHEL-72977]
  - kvm-virtio-mem-don-t-warn-about-THP-sizes-on-a-kernel-wi.patch [RHEL-72977]
  - kvm-redhat-Enable-virtio-mem-on-s390x.patch [RHEL-72977]
  - Resolves: RHEL-72977
    ([IBM 9.7 FEAT] KVM: Enable virtio-mem support - qemu part)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-19
changelog:
  - kvm-target-i386-Fix-conditional-CONFIG_SYNDBG-enablement.patch [RHEL-7130]
  - kvm-target-i386-Exclude-hv-syndbg-from-hv-passthrough.patch [RHEL-7130]
  - Resolves: RHEL-7130
    ([Hyper-V][RHEL9.2] Nested Hyper-V on KVM: L1 Windows VM with BIOS mode fails to boot up when using '-cpu host,hv_passthrough’ flag)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.5-1
changelog:
  - Rebase to 2024.5
    Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
    Resolves: #RHEL-30415


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-109
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2124440
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2124488


author: Attila Lakatos <alakatos@redhat.com> -8.2102.0-110
changelog:
  - Do not preserve capabilities when changing credentials
    resolves: rhbz#2169748
  - Remove unnecessary capability CAP_PERFMON
  - Add CAP_DAC_OVERRIDE to bypass file read and write permission checks
    resolves: rhbz#2158659


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-114
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157805
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176397
  - Systemd service file hardening
    resolves: rhbz#2176403
  - rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
    resolves: rhbz#2165899
  - rsyslog is now started after the network service during boot
    resolves: rhbz#2074318
  - imjournal: add second fallback to the message identifier
    resolves: rhbv#2129015


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-115
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2209017


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-116
changelog:
  - libcapng: do not try to drop capabilities that are not present
  - add global libcapng.default to not abort when libcapng fails
    resolves: rhbz#2216919


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.1.4-143
changelog:
  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-5586
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-5591
  - Fix ReDos vulnerability in URI.
    Resolves: RHEL-28919
    Resolves: RHEL-5612
  - Fix ReDos vulnerability in Time.
    Resolves: RHEL-28920
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-5613


author: Jun Aruga <jaruga@redhat.com> - 3.1.5-144
changelog:
  - Upgrade to Ruby 3.1.5.
    Resolves: RHEL-33978
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34129
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34121
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33871


author: Jarek Prokop <jprokop@redhat.com> - 3.1.7-146
changelog:
  - Upgrade to Ruby 3.1.7.
    Resolves: RHEL-55410
  - Fix DoS vulnerability in REXML. (CVE-2024-39908)
    Resolves: RHEL-86077


author: Jarek Prokop <jprokop@redhat.com> - 3.1.2-141
changelog:
  - Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
    Resolves: rhbz#2063773


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 0.5.4-1
changelog:
  - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
    Resolves: rhbz#2063773


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dhorak@redhat.com> - 2:2.24.0-1
changelog:
  - rebased to 2.24.0 (#2110310)
  - KVM: Tool to process encrypted Secure Execution guest dumps (#2044198)
  - zdev: Site-aware device configuration (#2044202)
  - Support IBM z16 Processor-Activity-Instrumentation Facility (#2110298)
  - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126617)
  - Support IBM z16 Processor Activity Instrumentation Extension 1 (#2127435)
  - Display Processor Activity Instrumentation CPACF counters (#2111012)
  - Resolves: #2110310 #2044198 #2044202 #2110298 #2126617 #2127435 #2111012


author: Dan Horák <dhorak@redhat.com> - 2:2.25.0-1
changelog:
  - rebased to 2.25.0 (#2110310)
  - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2044200)
  - zipl: Add secure boot trailer (#2142883)
  - Resolves: #2110310 #2044200 #2142883


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/1c2ab99)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.16.0-1
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.16.0
  - Resolves: RHEL-47197 RHEL-44886 RHEL-40812


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.1.12-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.12
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11416 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Tomas Korbar <tkorbar@redhat.com> - 7:5.5-5
changelog:
  - Resolves: #2151188 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-7
changelog:
  - Resolves: RHEL-14820 - squid: squid: denial of Servicein FTP
  - Resolves: RHEL-14809 - squid: squid: Denial of Service in HTTP Digest
    Authentication
  - Resolves: RHEL-14781 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-9
changelog:
  - Resolves: RHEL-18354 - squid: Buffer over-read in the HTTP Message processing
    feature (CVE-2023-49285)
  - Resolves: RHEL-18345 - squid: Incorrect Check of Function Return Value In
    Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18146 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-18231 - squid: Denial of Service in SSL Certificate validation
    (CVE-2023-46724)
  - Resolves: RHEL-15912 - squid: NULL pointer dereference in the gopher protocol
    code (CVE-2023-46728)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-12
changelog:
  - Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26092 - squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-13
changelog:
  - Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
    at kernel level but it is asked to connect to an ipv6 address by a client


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-14
changelog:
  - Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
    Service (CVE-2024-37894)
  - Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
    Cache Manager error responses (CVE-2024-23638)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.0-1
changelog:
  - Release 3.0.0
  - Support for OpenSSL 3.0
  - Support for outputting named Diffie-Hellman parameter groups
  - Support for CentOS Stream 9
  - Resolves: rhbz#1984468


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124976
  - Allow a pool to make use of added capacity of a block device
  - Resolves: rhbz#2039955
  - Enforce per-pool consistency of block device sector sizes
  - Resolves: rhbz#2039957
  - Do not read data from device specified in udev remove event
  - Resolves: rhbz#2124681
  - Specify pool to start by its name
  - Resolves: rhbz#2125012


author: Bryan Gurney <bgurney@redhat.com> - 3.5.5-1
changelog:
  - Update to version 3.5.5
  - Resolves: rhbz#2167463
  - Take into account the sector size of crypt devices
  - Resolves: rhbz#2170318
  - Add stratisd-tools package with stratis-dumpmetadata program
  - Resolves: rhbz#2173726
  - Support key description key in kernel keyring
  - Resolves: rhbz#2038492


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: Pavel Šimovec <psimovec@redhat.com> - 12.5.4-6
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: Frank Ch. Eigler <fche@redhat.com> - 4.9-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066858)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
changelog:
  - Review and fix issues reported by static analysers (rhbz#2069613)
  - Use systemd-rpm-macros and modernise the specfile a bit
    - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
      Thanks a lot!


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30756
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30768
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30762


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-2
changelog:
  - 1.14.0
    Resolves: RHEL-45316
  - Move old log to log.old if present
    Resolves: RHEL-54294
  - Fix shared memory leak
    Resolves: RHEL-55768


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-34880


author: Jan Grulich <jgrulich@redhat.com> - 1.14.1-2
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-62001


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-1
changelog:
  - 1.15.0
    Resolves: RHEL-78617
  - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
    Resolves: RHEL-77973
  - Add SELinux policy rules allowing to create directories under /root
    Resolves: RHEL-77975
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-80208
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-80189
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-80194
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-80196
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-80197
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-80206
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-80205
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-80209


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187337, #2187385, #2203706


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-39318, CVE-2023-39319, CVE-2023-39325 and
    CVE-2023-44487
  Resolves: RHEL-4435, RHEL-4439, RHEL-12694


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Mark Wielaard <mjw@redhat.com> - 3.22.0-1
changelog:
  - Upstream 3.22.0 final
  - BuildRequires elfutils-debuginfod for testing
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package
  - Use %patch -Pn instead of deprecated %patchn


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.17.0-0.1.klarlack.20200916git
changelog:
  - Switched upstream to Nils Goroll's fork which is the defacto current upstream
  - Synced description to reality
  - This is a snapshot build that needs autotools for building
  - Rebuilt for varnish-6.5.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-8
changelog:
  - 2016202 - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-17
changelog:
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-19
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-44
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1948570


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-45
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1958028


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Brian C. Lane <bcl@redhat.com> - 35.1-1
changelog:
  - New release: 35.1 (bcl)
  - spec: Change release back to 1 (bcl)
  - spec: Move testify BuildRequires into fedora block (bcl)
  - vendor: Add vendored dependencies for RHEL (bcl)
  - tools: Add prepare-source.sh vendoring helper script (bcl)
  - Makefile: skip vendor directory for check target (bcl)
  - spec: Bump release to 2 (bcl)
  - spec: Fix BuildRequires for tests (bcl)
  - Makefile: Remove executable from bash completion (bcl)
  - Makefile: Only use GOBUILDFLAGS (bcl)
  - spec: Bump release to 2 (bcl)
  - spec: Add doc files (bcl)
  - spec: Add gpg signature verification (bcl)
  - spec: Use git-core instead of git (bcl)
  - spec: Set License to Apache 2.0 (bcl)
  - spec: Update Source urls with new project location (bcl)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052601
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Michal Ruprich <mruprich@redhat.com> - 1.21.1-7
changelog:
  - Resolves: #2017842 - Two different segfaults when downloading multiple files
  - Removing metalink from manpage


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


