# changelog

author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241210-11
changelog:
  - [AMDCLIENT 10.0 Feature] amdgpu linux-firmware for the 2025 H mobile platform (RHEL-61604)
  - [AMDCLIENT 10.0 Feature] linux-firmware for a 2025 mobile platform (RHEL-61477)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  Resolves: RHEL-61604, RHEL-61477


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-12
changelog:
  - RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
    - fix submount shutdown race.
    - fix deadlock in master_notify_submount().
    - fix lock ordering deadlock in expire_cleanup().
  - Resolves: RHEL-87525


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-13
changelog:
  - RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
  - Resolves: RHEL-90571


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER

  Wed Jul 03 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-101
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -    Adding:
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.1
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.2
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-91788)
  - improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
  - fix sourcedir reloading to not multiply sources (RHEL-95017)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250424-1.git9267dee
changelog:
  - LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  - drop crypto-policies-pq-preview subpackage, TEST-PQ goes into main one
  - NO-PQ: introduce
  - openssl: fix enabling integrity-only ciphersuites (still need min_rsa_size=0)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita6d4d0c
changelog:
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patches 0014-0015 are included in the soruce tarball
    * Patch 0001 is from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now 0002-0014
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules
  - Resolves: RHEL-50698


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-7
changelog:
  - Add 0018-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0019-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0020-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0021-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0022-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0023-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0024-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0025-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0026-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0027-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  - Add 0028-multipath-clean-up-find_multipaths-documentation.patch
  - Add 0029-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82180 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-82180


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-9
changelog:
  - Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82535


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-6
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-7
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Abhi Das <adas@redhat.com> - 1.8.2-2
changelog:
  - Rebase to 1.8.2-2 for zstd and multithreading support and
    Remove erroneously added gating.yaml
    Resolves: RHEL-68370


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Arjun Shankar <arjun@redhat.com> - 2.39-29
changelog:
  - Sync with upstream branch release/2.39/master,
    commit dcaf51b41e259387602774829c45222d0507f90a:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Make tst-strtod-underflow type-generic
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - Add tests of more strtod special cases
  - Add more tests of strtod end pointer
  - Make tst-strtod2 and tst-strtod5 type-generic
  - powerpc64le: Build new strtod tests with long double ABI flags (bug 32145)
  - Do not set errno for overflowing NaN payload in strtod/nan (bug 32045)
  - Improve NaN payload testing
  - Make __strtod_internal tests type-generic
  - Fix strtod subnormal rounding (bug 30220)
  - More thoroughly test underflow / errno in tst-strtod-round
  - Test errno setting on strtod overflow in tst-strtod-round
  - Add tests of fread
  - stdio-common: Add new test for fdopen
  - libio: Attempt wide backup free only for non-legacy code
  - debug: Fix read error handling in pcprofiledump
  - elf: Fix tst-dlopen-tlsreinit1.out test dependency
  - elf: Avoid re-initializing already allocated TLS in dlopen (bug 31717)
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper
  - string: strerror, strsignal cannot use buffer after dlmopen (bug 32026)
  - Define __libc_initial for the static libc
  - x86: Fix bug in strchrnul-evex512 [BZ #32078]
  - Adjust check-local-headers test for libaudit 4.0
  - x32/cet: Support shadow stack during startup for Linux 6.10
  - x86-64: Remove sysdeps/x86_64/x32/dl-machine.h
  - support: Add options list terminator to the test driver
  - manual/stdio: Further clarify putc, putwc, getc, and getwc
  - Fix name space violation in fortify wrappers (bug 32052)
  - resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
  - Add mremap tests
  - mremap: Update manual entry
  - linux: Update the mremap C implementation [BZ #31968]
  - Enhanced test coverage for strncmp, wcsncmp
  - Enhance test coverage for strnlen, wcsnlen


author: Florian Weimer <fweimer@redhat.com> - 2.39-34
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 808a84a8b81468b517a4d721fdc62069cb8c211f:
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86: Avoid integer truncation with large cache sizes (bug 32470)
  - math: Exclude internal math symbols for tests [BZ #32414]
  - malloc: add indirection for malloc(-like) functions in tests [BZ #32366]
  - Pass -nostdlib -nostartfiles together with -r [BZ #31753]
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Marta Lewandowska <mlewando@redhat.com> - 2.12-15
changelog:
  - 99-grub-mkconfig.install: Disable BLS and run grub2-mkconfig when GRUB_ENABLE_BLSCFG is disable
  - Resolves: #RHEL-86261


author: Leo Sandoval <lsandova@redhat.com> - 8.40-81
changelog:
  - grubby-bls: in s390* systems, run zipl on grub cfg update event
    Fixes previous commit and formats better the conditions that trigger grub cfg updates
    Resolves: #RHEL-36092


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Jan Macku <jamacku@redhat.com> - 20240905-3
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-96.el10]
changelog:
  - x86/CPU/AMD: Print the reason for the last reset (Steve Best) [RHEL-89439]
  - Documentation: Add AMD Zen debugging document (Steve Best) [RHEL-89439]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (Steve Best) [RHEL-89439]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (Steve Best) [RHEL-89439]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (Steve Best) [RHEL-89439]
  - unmaintain ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-81214]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90739]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94262] {CVE-2025-37738}
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93643] {CVE-2025-23150}
  - lockd: add netlink control interface (Scott Mayhew) [RHEL-71698]
  - macintosh: declare ctl_table as const (José Expósito) [RHEL-88416]
  - tty: Make sysctl table const (José Expósito) [RHEL-88416]
  - sysctl: allow registration of const struct ctl_table (José Expósito) [RHEL-88416]
  - sysctl: move internal interfaces to const struct ctl_table (José Expósito) [RHEL-88416]
  - bpf: Constify ctl_table argument of filter function (José Expósito) [RHEL-88416]
  - hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (José Expósito) [RHEL-88416]
  - hrtimers: Add missing hrtimer_init() trace points (José Expósito) [RHEL-88416]
  - mm/migrate: Add migrate_device_pfns (José Expósito) [RHEL-88416]
  - mm: allow compound zone device pages (José Expósito) [RHEL-88416]
  - mm/mm_init: move p2pdma page refcount initialisation to p2pdma (José Expósito) [RHEL-88416]
  - drm: Move for_each_if() to util_macros.h for wider use (José Expósito) [RHEL-88416]
  - ksm: add ksm involvement information for each process (CKI Backport Bot) [RHEL-84770]
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry (Mark Salter) [RHEL-80338]
  - selftests/mm: rename pkey register macro (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: fix decoding of lines with an additional info (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: remove trailing space (Mark Salter) [RHEL-80338]
  - redhat/configs: Enable ARM_CCA_GUEST (Mark Salter) [RHEL-80338]
  - arm64: Fix 5-level paging support in kexec/hibernate trampoline (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of TRFCR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64: Remove duplicate included header (Mark Salter) [RHEL-80338]
  - arm64/Kconfig: Drop EXECMEM dependency from ARCH_WANTS_EXECMEM_LATE (Mark Salter) [RHEL-80338]
  - arm64: asm: Fix typo in pgtable.h (Mark Salter) [RHEL-80338]
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop INIT_MM_CONTEXT() (Mark Salter) [RHEL-80338]
  - Documentation: Update the behaviour of "kvm-arm.mode" (Mark Salter) [RHEL-80338]
  - arm64: rsi: Add automatic arm-cca-guest module loading (Mark Salter) [RHEL-80338]
  - arm64: Document Arm Confidential Compute (Mark Salter) [RHEL-80338]
  - virt: arm-cca-guest: TSM_REPORT support for realms (Mark Salter) [RHEL-80338]
  - arm64: Add missing registrations of hwcaps (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Remove stray references to SF8MMx (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Add 2024 dpISA extensions to hwcap test (Mark Salter) [RHEL-80338]
  - KVM: arm64: Allow control of dpISA extensions in ID_AA64ISAR3_EL1 (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Describe 2024 dpISA extensions to userspace (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 to DDI0601 2024-12 (Mark Salter) [RHEL-80338]
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (Mark Salter) [RHEL-80338]
  - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ZFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64FPFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR3_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64PFR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of CPACR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Convert *_EL12 accessors to Mapping (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of the TCR2_EL1x SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Allow a 'Mapping' descriptor for system registers (Mark Salter) [RHEL-80338]
  - arm64/cpufeature: Refactor conditional logic in init_cpu_ftr_reg() (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add HAFT to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: mm: Test for pmd_sect() in vmemmap_check_pmd() (Mark Salter) [RHEL-80338]
  - arm64/mm: Replace open encodings with PXD_TABLE_BIT (Mark Salter) [RHEL-80338]
  - arm64/mm: Rename pte_mkpresent() as pte_mkvalid() (Mark Salter) [RHEL-80338]
  - arm64: Kconfig: force ARM64_PAN=y when enabling TTBR0 sw PAN (Mark Salter) [RHEL-80338]
  - arm64/mm: Fix Boot panic on Ampere Altra (Mark Salter) [RHEL-80338]
  - arm64/mm: Override PARange for !LPA2 and use it consistently (Mark Salter) [RHEL-80338]
  - arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled (Mark Salter) [RHEL-80338]
  - bpf, arm64: Emit A64_{ADD,SUB}_I when possible in emit_{lse,ll_sc}_atomic() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Factor out emit_a64_add_i() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Simplify if logic in emit_lse_atomic() (Mark Salter) [RHEL-80338]
  - redhat configs: enable CONFIG_HISILICON_ERRATUM_162100801 (Mark Salter) [RHEL-80338]
  - arm64: realm: Use aliased addresses for device DMA to shared buffers (Mark Salter) [RHEL-80338]
  - dma: Introduce generic dma_addr_*crypted helpers (Mark Salter) [RHEL-80338]
  - dma: Fix encryption bit clearing for dma_to_phys (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Don't WARN when unwinding other tasks (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Skip reporting LR at exception boundaries (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c (Mark Salter) [RHEL-80338]
  - arm64/signal: Silence sparse warning storing GCSPR_EL0 (Mark Salter) [RHEL-80338]
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 (Mark Salter) [RHEL-80338]
  - clocksource/drivers/arm_arch_timer: Use of_property_present() for non-boolean properties (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Ensure stable names for GCS stress test results (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Validate that GCS push and write permissions work (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add GCS to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: disable ARCH_CORRECT_STACKTRACE_ON_KRETPROBE tests (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove remaining 64x64 PMULL fallback code (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Use faster 16x64 bit polynomial multiply (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove obsolete chunking logic (Mark Salter) [RHEL-80338]
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Mark Salter) [RHEL-80338]
  - arm64/ptrace: Clarify documentation of VL configuration via ptrace (Mark Salter) [RHEL-80338]
  - arm64/mm: Change protval as 'pteval_t' in map_range() (Mark Salter) [RHEL-80338]
  - arm64: uprobes: Optimize cache flushes for xol slot (Mark Salter) [RHEL-80338]
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Mark Salter) [RHEL-80338]
  - arm64/mm: Sanity check PTE address before runtime P4D/PUD folding (Mark Salter) [RHEL-80338]
  - arm64/fpsimd: Fix a typo (Mark Salter) [RHEL-80338]
  - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers (Mark Salter) [RHEL-80338]
  - arm64: Return early when break handler is found on linked-list (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop _PROT_SECT_DEFAULT (Mark Salter) [RHEL-80338]
  - arm64: Add command-line override for ID_AA64MMFR0_EL1.ECV (Mark Salter) [RHEL-80338]
  - arm64: head: Drop SWAPPER_TABLE_SHIFT (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: add POE to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - selftests/mm: Enable pkey_sighandler_tests on arm64 (Mark Salter) [RHEL-80338]
  - selftests/mm: Use generic pkey register manipulation (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unused macro (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unnecessary check when saving POE state (Mark Salter) [RHEL-80338]
  - arm64/scs: Drop unused prototype __pi_scs_patch_vmlinux() (Mark Salter) [RHEL-80338]
  - arm64/scs: Deal with 64-bit relative offsets in FDE frames (Mark Salter) [RHEL-80338]
  - arm64/scs: Fix handling of DWARF augmentation data in CIE/FDE frames (Mark Salter) [RHEL-80338]
  - arm64: preserve pt_regs::stackframe during exec*() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: unwind exception boundaries (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: split unwind_consume_stack() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report recovered PCs (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report source of unwind data (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: move dump_backtrace() to kunwind_stack_walk() (Mark Salter) [RHEL-80338]
  - arm64: use a common struct frame_record (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: swap 'unused' and 'pmr' fields (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: rename "pmr_save" -> "pmr" (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: remove stale big-endian layout (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: assert pt_regs is a multiple of 16 bytes (Mark Salter) [RHEL-80338]
  - arm64: Support AT_HWCAP3 (Mark Salter) [RHEL-80338]
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4 (Mark Salter) [RHEL-80338]
  - arm64/crc32: Implement 4-way interleave using PMULL (Mark Salter) [RHEL-80338]
  - arm64/crc32: Reorganize bit/byte ordering macros (Mark Salter) [RHEL-80338]
  - arm64/lib: Handle CRC-32 alternative in C code (Mark Salter) [RHEL-80338]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Mark Salter) [RHEL-80338]
  - arm64: mops: Document requirements for hypervisors (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for copy_page() and clear_page() (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for memcpy() routines (Mark Salter) [RHEL-80338]
  - arm64: mops: Document booting requirement for HCR_EL2.MCE2 (Mark Salter) [RHEL-80338]
  - arm64: mops: Handle MOPS exceptions from EL1 (Mark Salter) [RHEL-80338]
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions (Mark Salter) [RHEL-80338]
  - arm64: optimize flush tlb kernel range (Mark Salter) [RHEL-80338]
  - arm64: tlbflush: add __flush_tlb_range_limit_excess() (Mark Salter) [RHEL-80338]
  - arm64: insn: Simulate nop instruction for better uprobe performance (Mark Salter) [RHEL-80338]
  - arm64: probes: Remove probe_opcode_t (Mark Salter) [RHEL-80338]
  - arm64: probes: Cleanup kprobes endianness conversions (Mark Salter) [RHEL-80338]
  - arm64: probes: Move kprobes-specific fields (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove PREEMPT_DISABLE_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove DMA_{TO,FROM}_DEVICE (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VM_EXEC and PAGE_SZ (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove MM_CONTEXT_ID (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove COMPAT_{RT_,SIGFRAME_REGS_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VMA_VM_* (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove TSK_ACTIVE_MM (Mark Salter) [RHEL-80338]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-97.el10]
changelog:
  - memcg: always call cond_resched() after fn() (Radostin Stoyanov) [RHEL-81199]
  - memcg: fix soft lockup in the OOM process (Radostin Stoyanov) [RHEL-81199] {CVE-2024-57977}
  - r8169: switch away from deprecated pcim_iomap_table (Izabela Bakollari) [RHEL-89042]
  - r8169: increase max jumbo packet size on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for Intel Killer E5000 (Izabela Bakollari) [RHEL-89042]
  - r8169: don't scan PHY addresses > 0 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove redundant hwmon support (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D rev.b (Izabela Bakollari) [RHEL-89042]
  - r8169: adjust version numbering for RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove unused flag RTL_FLAG_TASK_RESET_NO_QUEUE_WAKE (Izabela Bakollari) [RHEL-89042]
  - r8169: use helper r8169_mod_reg8_cond to simplify rtl_jumbo_config (Izabela Bakollari) [RHEL-89042]
  - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers (Izabela Bakollari) [RHEL-89042]
  - r8169: improve rtl_set_d3_pll_down (Izabela Bakollari) [RHEL-89042]
  - r8169: improve __rtl8169_set_wol (Izabela Bakollari) [RHEL-89042]
  - r8169: remove leftover locks after reverted change (Izabela Bakollari) [RHEL-89042]
  - r8169: improve initialization of RSS registers on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: fix inconsistent indenting in rtl8169_get_eth_mac_stats (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D (Izabela Bakollari) [RHEL-89042]
  - r8169: enable EEE at 2.5G per default on RTL8125B (Izabela Bakollari) [RHEL-89042]
  - r8169: remove rtl_dash_loop_wait_high/low (Izabela Bakollari) [RHEL-89042]
  - r8169: avoid duplicated messages if loading firmware fails and switch to warn level (Izabela Bakollari) [RHEL-89042]
  - r8169: replace custom flag with disable_work() et al (Izabela Bakollari) [RHEL-89042]
  - r8169: don't take RTNL lock in rtl_task() (Izabela Bakollari) [RHEL-89042]
  - r8169: implement additional ethtool stats ops (Izabela Bakollari) [RHEL-89042]
  - r8169: enable SG/TSO on selected chip versions per default (Izabela Bakollari) [RHEL-89042]
  - r8169: remove original workaround for RTL8125 broken rx issue (Izabela Bakollari) [RHEL-89042]
  - r8169: don't apply UDP padding quirk on RTL8126A (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for the temperature sensor being available from RTL8125B (Izabela Bakollari) [RHEL-89042]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83635]
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs (Tony Camuso) [RHEL-93188]
  - HID: intel-thc: fix CONFIG_HID dependency (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Send clock sync message immediately after reset (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_get_tx_* (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_tx_empty (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_dev_state_str (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Add firmware version sysfs attributes (Tony Camuso) [RHEL-93188]
  - HID: Fix typo in the comment (Tony Camuso) [RHEL-93188]
  - HID: ishtp-hid-client: replace fake-flex arrays with flex-array members (Tony Camuso) [RHEL-93188]
  - selftests: netfilter: fix conntrack stress test failures on debug kernels (Florian Westphal) [RHEL-76546]
  - selftests: netfilter: add conntrack stress test (Florian Westphal) [RHEL-76546]
  - netfilter: nf_conntrack: speed up reads from nf_conntrack proc file (Florian Westphal) [RHEL-76546]
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia) [RHEL-87405]
  - loop: add file_start_write() and file_end_write() (Ming Lei) [RHEL-96222]
  - loop: don't require ->write_iter for writable files in loop_configure (Ming Lei) [RHEL-96222]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-79908]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-79908]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-79908]
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88003]
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Mamatha Inamdar) [RHEL-95931]
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Mamatha Inamdar) [RHEL-95931]
  - mptcp: Remove unused declaration mptcp_set_owner_r() (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: validate MPJoin HMacFailure counters (Davide Caratti) [RHEL-84538]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: close fd_in before returning in main_loop (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Davide Caratti) [RHEL-84538]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84538] {CVE-2025-23145}
  - mptcp: sockopt: fix getting freebind & transparent (Davide Caratti) [RHEL-84538]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Davide Caratti) [RHEL-84538]
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: more info without CAP_NET_ADMIN (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: always print the name if any (Davide Caratti) [RHEL-84538]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84538] {CVE-2025-21938}
  - mptcp: reset when MPTCP opts are dropped after join (Davide Caratti) [RHEL-84538]
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84538] {CVE-2025-21875}
  - mptcp: micro-optimize __mptcp_move_skb() (Davide Caratti) [RHEL-84538]
  - mptcp: dismiss __mptcp_rmem() (Davide Caratti) [RHEL-84538]
  - net: dismiss sk_forward_alloc_get() (Davide Caratti) [RHEL-84538]
  - mptcp: cleanup mem accounting (Davide Caratti) [RHEL-84538]
  - mptcp: move the whole rx path under msk socket lock protection (Davide Caratti) [RHEL-84538]
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() (Davide Caratti) [RHEL-84538]
  - mptcp: consolidate subflow cleanup (Davide Caratti) [RHEL-84538]
  - mptcp: pm: userspace: flags: clearer msg if no remote addr (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: connect: -f: no reconnect (Davide Caratti) [RHEL-84538]
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted (Davide Caratti) [RHEL-84538]
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84538] {CVE-2025-21705}
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84538] {CVE-2025-21706}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84538] {CVE-2025-21707}
  - selftests: mptcp: avoid spurious errors on disconnect (Davide Caratti) [RHEL-84538]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84538]
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84538]
  - mptcp: sysctl: avail sched: remove write access (Davide Caratti) [RHEL-84538]
  - mptcp: prevent excessive coalescing on receive (Davide Caratti) [RHEL-84538]
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Davide Caratti) [RHEL-84538]
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg (Davide Caratti) [RHEL-84538]
  - mptcp: remove unneeded lock when listing scheds (Davide Caratti) [RHEL-84538]
  - mptcp: implement mptcp_pm_connection_closed (Davide Caratti) [RHEL-84538]
  - dim: pass dim_sample to net_dim() by reference (CKI Backport Bot) [RHEL-89803]
  - dim: make dim_calc_stats() inputs const pointers (CKI Backport Bot) [RHEL-89803]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-86507]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-98.el10]
changelog:
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38569]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38569]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38569]
  - redhat/kernel.spec: drop modules-extra-matched for noarch (Jan Stancek) [RHEL-95740]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-86520]
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87577]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87577]
  - ovl: don't require "metacopy=on" for "verity" (Miklos Szeredi) [RHEL-82858]
  - ovl: relax redirect/metacopy requirements for lower -> data redirect (Miklos Szeredi) [RHEL-82858]
  - ovl: make redirect/metacopy rejection consistent (Miklos Szeredi) [RHEL-82858]
  - ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-82858]
  - ovl: don't allow datadir only (Miklos Szeredi) [RHEL-82858]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94466] {CVE-2025-37750}
  - Merge DRM changes from upstream v6.13..v6.14 (José Expósito) [RHEL-75957]
  - Merge DRM changes from upstream v6.12..v6.13 (José Expósito) [RHEL-75957]
  - selftests/bpf: lwt_seg6local: Move test to test_progs (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: lwt_seg6local: Remove unused routes (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: add missing header include for htons (Hangbin Liu) [RHEL-82844]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-99.el10]
changelog:
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97171]
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89166]
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Olga Kornievskaia) [RHEL-82689]
  - nfsd: fix access checking for NLM under XPRTSEC policies (Olga Kornievskaia) [RHEL-82689]
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-92678]
  - selftests: Add IPv6 link-local address generation tests for GRE devices. (Guillaume Nault) [RHEL-94024]
  - tpm: remove kmalloc failure error message (Štěpán Horáček) [RHEL-72764]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72764]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72764]
  - tpm: Make chip->{status,cancel,req_canceled} opt (Štěpán Horáček) [RHEL-72764]
  - tpm: End any active auth session before shutdown (Štěpán Horáček) [RHEL-72764]
  - tpm_crb: Clean-up and refactor check for idle support (Štěpán Horáček) [RHEL-72764]
  - tpm/tpm_ftpm_tee: fix struct ftpm_tee_private documentation (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72764]
  - tpm: Convert warn to dbg in tpm2_start_auth_session() (Štěpán Horáček) [RHEL-72764]
  - tpm: Lazily flush auth session when getting random data (Štěpán Horáček) [RHEL-72764]
  - tpm: ftpm_tee: remove incorrect of_match_ptr annotation (Štěpán Horáček) [RHEL-72764]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Add new device/vendor ID 0x50666666 (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Move i2c locking to request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Use generic request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72764]
  - libstub,tpm: do not ignore failure case when reading final event log (Štěpán Horáček) [RHEL-72764]
  - tpm: fix unsigned/signed mismatch errors related to __calc_tpm2_event_size (Štěpán Horáček) [RHEL-72764]
  - tpm: do not ignore memblock_reserve return value (Štěpán Horáček) [RHEL-72764]
  - tpm: fix signed/unsigned bug when checking event logs (Štěpán Horáček) [RHEL-72764]
  - openvswitch: Stricter validation for the userspace action (Eelco Chaudron) [RHEL-84563]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [RHEL-84563]
  - net: openvswitch: fix nested key length validation in the set() action (Eelco Chaudron) [RHEL-84563] {CVE-2025-37789}
  - net: openvswitch: remove misbehaving actions length check (Eelco Chaudron) [RHEL-84563]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eelco Chaudron) [RHEL-81497 RHEL-84563] {CVE-2025-21761}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Eelco Chaudron) [RHEL-84563] {CVE-2025-21681}
  - openvswitch: Pass on secpath details for internal port rx. (Eelco Chaudron) [RHEL-84563]
  - selftests: mptcp: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: netfilter: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for SRv6 tests and remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for bareudp testing (Hangbin Liu) [RHEL-80284]
  - selftests: net: remove redundant rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: disable rp_filter after namespace initialization (Hangbin Liu) [RHEL-80284]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81403] {CVE-2025-21764}
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89489]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87628] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87628]
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69285]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-100.el10]
changelog:
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92308]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92308]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92308]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92308]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92308]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92308]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92308]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92308]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92308]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92308]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92674]
  - tcp: add LINUX_MIB_PAWS_TW_REJECTED counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_TW_PAWS drop reason (Antoine Tenart) [RHEL-88891]
  - udp: expand SKB_DROP_REASON_UDP_CSUM use (Antoine Tenart) [RHEL-88891]
  - tcp: add four drop reasons to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - tcp: add a drop_reason pointer to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - af_unix: Use consume_skb() in connect() and sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Reuse out_pipe label in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_dgram_disconnected(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_stream_read_skb(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in manage_oob(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in __unix_gc(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_sock_destructor(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_release_sock(). (Antoine Tenart) [RHEL-88891]
  - net: dropreason: Gather SOCKET_ drop reasons. (Antoine Tenart) [RHEL-88891]
  - tcp: add LINUX_MIB_PAWS_OLD_ACK SNMP counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_PAWS_ACK drop reason (Antoine Tenart) [RHEL-88891]
  - tcp: add drop_reason support to tcp_disordered_ack() (Antoine Tenart) [RHEL-88891]
  - net: bridge: add skb drop reasons to the most common drop points (Antoine Tenart) [RHEL-88891]
  - net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE (Antoine Tenart) [RHEL-88891]
  - net/sched: Add drop reasons for AQM-based qdiscs (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_cake: Add drop reasons (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_fq: add three drop_reason (Antoine Tenart) [RHEL-88891]
  - netfilter: br_netfilter: remove unused conditional and dead code (Antoine Tenart) [RHEL-88891]
  - ipv4: route: fix drop reason being overridden in ip_route_input_slow (Antoine Tenart) [RHEL-88891]
  - ip: Return drop reason if in_dev is NULL in ip_route_input_rcu(). (Antoine Tenart) [RHEL-88891]
  - net: ip: fix unexpected return in fib_validate_source() (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_use_hint() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mkroute_input/__mkroute_input return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_noref() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_rcu() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_slow() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mc_validate_source() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_mc() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make fib_validate_source() support drop reasons (Antoine Tenart) [RHEL-88891]
  - objtool, x86/hweight: Remove ANNOTATE_IGNORE_ALTERNATIVE (Joe Lawrence) [RHEL-94124]
  - jump_label: adjust inline asm to be consistent (Joe Lawrence) [RHEL-94124]
  - objtool: Speed up SHT_GROUP reindexing (Joe Lawrence) [RHEL-94124]
  - objtool: Fix up st_info in COMDAT group section (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 (Joe Lawrence) [RHEL-94124]
  - objtool: Remove ANNOTATE_IGNORE_ALTERNATIVE from CLAC/STAC (Joe Lawrence) [RHEL-94124]
  - objtool, xen: Fix INSN_SYSCALL / INSN_SYSRET semantics (Joe Lawrence) [RHEL-94124]
  - objtool: Stop UNRET validation on UD2 (Joe Lawrence) [RHEL-94124]
  - objtool: Split INSN_CONTEXT_SWITCH into INSN_SYSCALL and INSN_SYSRET (Joe Lawrence) [RHEL-94124]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Joe Lawrence) [RHEL-94124]
  - objtool: Fix X86_FEATURE_SMAP alternative handling (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use asm_inline() instead of asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use ASM_CALL_CONSTRAINT in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use named operands in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86: use proper 'clac' and 'stac' opcode names (Joe Lawrence) [RHEL-94124]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Update dump_ghcb() to use the GHCB snapshot fields (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check and free obsolete roots in kvm_mmu_reload() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally for KVM_PROFILING (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally in KVM tracepoints (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: WARN if an invalid posted interrupt IRTE entry is added (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: WARN if KVM attempts to set vCPU affinity without posted intrrupts (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Allocate IR data using atomic allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't update IRTEs if APICv/AVIC is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64, x86: make kvm_arch_has_irq_bypass() inline (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the KVM headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow building irqbypass.ko as as module when kvm.ko is a module (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Wrap sanity check on number of TDP MMU pages with KVM_PROVE_MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add option to rseq test to override /dev/cpu_dma_latency (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Maxim Levitsky) [RHEL-82917] {CVE-2025-23141}
  - Documentation: kvm: remove KVM_CAP_MIPS_TE (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: organize capabilities in the right section (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix some definition lists (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: drop "Capability" heading from capabilities (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: give correct name for KVM_CAP_SPAPR_MULTITCE (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: list once tests that are valid on all architectures (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: bring list of exit reasons up to date (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add infrastructure for secure TSC (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove the unreachable case for 0x80000022 leaf in __do_cpuid_func() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use named operands in inline asm (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Extract checks on entry/exit control pairs to a helper macro (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Invalidate "next" SNP VMSA GPA even on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP vCPU state updates (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Mark VMCB dirty before processing incoming snp_vmsa_gpa (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP AP Creation error handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Simplify request+kick logic in SNP AP Creation handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Require AP's "requested" SEV_FEATURES to match KVM's view (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Refuse to attempt VRMUN if an SEV-ES+ guest has an invalid VMSA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always set mp_state to RUNNABLE on wakeup from HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Relax assertion on HLT exits if CPU supports Idle HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Inject #GP if memory operand for INVPCID is non-canonical (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Remove tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Decouple EPT RWX bits from EPT Violation protection bits (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove EPT_VIOLATIONS_ACC_*_BIT defines (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "UFFDIO_CONINUE" -> "UFFDIO_CONTINUE" (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop kvm_arch_sync_events() now that all implementations are nops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fold guts of kvm_arch_sync_events() into kvm_arch_pre_destroy_vm() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unload MMUs during vCPU destruction, not before (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert that a destroyed/freed vCPU is no longer visible (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't load/put vCPU when unloading its MMU during teardown (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the x86 headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Provide helpers to set the error code (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Convert plain error code numbers to defines (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Pass XFD_ERR as pseudo-payload when injecting #NM (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Don't modify guest XFD_ERR if CR0.TS=1 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use a dedicated flow for queueing re-injected exceptions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename and invert async #PF's send_user_only flag to send_always (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't inject PV async #PF if SEND_ALWAYS=0 and guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-82917]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Override TSC_STABLE flag for Xen PV clocks in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Setup Hyper-V TSC page before Xen PV clocks (during clock update) (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove per-vCPU "cache" of its reference pvclock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pass reference pvclock as a param to kvm_setup_guest_pvclock() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Set PVCLOCK_GUEST_STOPPED only for kvmclock, not for Xen PV clock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't bleed PVCLOCK_GUEST_STOPPED across PV clocks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Use guest's copy of pvclock when starting timer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Process "guest stopped request" once per guest time update (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop local pvclock_flags variable in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Eliminate "handling" of impossible errors during SUSPEND (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update Xen TSC leaves during CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Move kvm_xen_hvm_config field into kvm_xen (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Bury xen_hvm_config behind CONFIG_KVM_XEN=y (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Consult kvm_xen_enabled when checking for Xen MSR writes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Add an #ifdef'd helper to detect writes to Xen MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Restrict hypercall MSR to unofficial synthetic range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Walk rmaps (shadow MMU) without holding mmu_lock when aging gfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add support for lockless walks of rmap SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add infrastructure to allow walking rmaps outside of mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor low level rmap helpers to prep for walking w/o mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Only check gfn age in shadow MMU if indirect_shadow_pages > 0 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip shadow MMU test_young if TDP MMU reports page as young (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Age TDP MMU SPTEs without holding mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always update A/D-disabled SPTEs atomically (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force atomic update if only the Accessed bit is volatile (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Factor out spte atomic bit clearing routine (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow lockless walk of SPTEs when handing aging mmu_notifier event (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add infrastructure for getting vCPU binary stats (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Adjust number of files rlimit for all "standard" VMs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Get VM's binary stats FD when opening VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add struct and helpers to wrap binary stats cache (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Macrofy vm_get_stat() to auto-generate stat name string (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that __vm_get_stat() actually finds a stat (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename kvm_handle_hva_range() (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Defer runtime updates of dynamic CPUID bits until CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Query X86_FEATURE_MWAIT iff userspace owns the CPUID feature bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Apply TSX_CTRL_CPUID_CLEAR if and only if the vCPU has RTM or HLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use for-loop to iterate over XSTATE size entries (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use kvfree_rcu() to free old optimized APIC map (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Close VM's binary stats FD when releasing VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix mostly theoretical leak of VM's binary stats FD (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use to_kvm_sev_info() for fetching kvm_sev_info struct (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unused iommu_domain and iommu_noncoherent from kvm_arch (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add helpers for locally (un)blocking IRQs on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add printf attribute to _no_printf() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unneeded semicolon (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add defines for AMD PMU CPUID features and properties (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix printf() format goof in SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure all vCPUs hit -EFAULT during initial RO stage (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't rely on DebugSwap to restore host DR0..DR3 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Save host DR masks on CPUs with DebugSwap (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-82917]
  - kvm: retry nx_huge_page_recovery_thread creation (Maxim Levitsky) [RHEL-82917]
  - vhost_task: fix vhost_task_create() documentation (Maxim Levitsky) [RHEL-82917]
  - vhost: return task creation error instead of NULL (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Free vCPUs before freeing VM state (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Maxim Levitsky) [RHEL-82917] {CVE-2025-21839}
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add CPUID tests for Hyper-V features that need in-kernel APIC (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Manage CPUID array in Hyper-V CPUID test's core helper (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mark test_hv_cpuid_e2big() static in Hyper-V CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Maxim Levitsky) [RHEL-82917] {CVE-2025-21779}
  - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Maxim Levitsky) [RHEL-82917]
  - KVM: remove kvm_arch_post_init_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "initally" -> "initially" (Maxim Levitsky) [RHEL-82917]
  - KVM: Do not restrict the size of KVM-internal memory regions (Maxim Levitsky) [RHEL-82917]
  - kvm: defer huge page recovery vhost task to later (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow all flags for KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop double-underscores from __kvm_set_memory_region() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add a dedicated API for setting KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert slots_lock is held when setting memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: Open code kvm_set_memory_region() into its sole caller (ioctl() API) (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in svm_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Fix comment of handle_vmx_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reinstate __exit attribute for vmx_exit() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in sev_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double RDPKRU when loading host/guest PKRU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use LVT_TIMER instead of an open coded literal (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Support GFN direct bits (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a VM type define for TDX (Maxim Levitsky) [RHEL-82917]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always complete hypercall via function callback (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Honor event priority when emulating PI delivery during VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Use vmcs01's controls shadow to check for IRQ/NMI windows at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop manual vmcs01.GUEST_INTERRUPT_STATUS.RVI check at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check for pending INIT/SIPI after entering non-root mode (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Explicitly update vPPR on successful nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Allow toggling bits in MSR_IA32_RTIT_CTL when enable bit is cleared (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add information about pending requests to kvm_exit tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add interrupt injection information to the kvm_entry tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add test case for MMIO during vectoring on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add and use a helper function for x86's LIDT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Try to unprotect and retry on unhandleable emulation failure (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add emulation status for unhandleable exception vectoring (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add function for vectoring error generation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that are enabled at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that require vendor enabling (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "SF" macro to "SCATTERED_F" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop superfluous host XSAVE check when adjusting guest XSAVES caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace (almost) all guest CPUID feature queries with cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Shuffle code to prepare for dropping guest_cpuid_has() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update guest cpu_caps at runtime for dynamic CPUID-based features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update OS{XSAVE,PKE} bits in guest CPUID irrespective of host support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop unnecessary check that cpuid_entry2_find() returns right leaf (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double CPUID lookup when updating MWAIT at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on KVM support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Treat MONTIOR/MWAIT as a "partially emulated" feature (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Extract code for generating per-entry emulated CPUID information (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on guest CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace guts of "governed" features with comprehensive cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "governed features" helpers to use "guest_cpu_cap" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove all direct usage of cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move kvm_find_cpuid_entry{,_index}() up near cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always operate on kvm_vcpu data in cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unnecessary caching of KVM's PV CPUID base (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear PV_UNHALT for !HLT-exiting only when userspace sets CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that KVM emulates in software (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that ignore host kernel support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Harden CPU capabilities processing against out-of-scope features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that are 64-bit only (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do reverse CPUID sanity checks in __feature_leaf() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't update PV features caches when enabling enforcement capability (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Zero out PV features cache when the CPUID leaf is not present (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's KVM PV test to match KVM's disabling exits behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix a bad TEST_REQUIRE() in x86's KVM PV test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/pmu: Drop now-redundant refresh() during init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM stuffs runtime CPUID OS bits on CR4 writes (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Refresh vCPU CPUID cache in __vcpu_get_cpuid_entry() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu->cpuid is non-NULL when getting CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's set_sregs_test to match KVM's CPUID enforcement (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do all post-set CPUID processing during vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Override ARCH for x86_64 instead of using ARCH_DIR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use canonical $(ARCH) paths for KVM selftests directories (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Provide empty 'all' and 'clean' targets for unsupported ARCHs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM correctly handles mprotect(PROT_READ) (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a read-only mprotect() phase to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely limit the number of guest loops in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use vcpu_arch_put_guest() in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Enable mmu_stress_test on arm64 (Maxim Levitsky) [RHEL-82917]
  - KVM: sefltests: Explicitly include ucall_common.h in mmu_stress_test.c (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Compute number of extra pages needed in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only muck with SREGS on x86 in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rename max_guest_memory_test to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Check for a potential unhandled exception iff KVM_RUN succeeded (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu_{g,s}et_reg() won't truncate (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Return a value from vcpu_get_reg() instead of using an out-param (Maxim Levitsky) [RHEL-82917]
  - KVM: Move KVM_REG_SIZE() definition to common uAPI header (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Remove redundant TLB flush on guest CR4.PGE change (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Macrofy SEV=n versions of sev_xxx_guest() (Maxim Levitsky) [RHEL-82917]
  - KVM/x86: add comment to kvm_mmu_do_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-82917]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-82917]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Maxim Levitsky) [RHEL-82917] {CVE-2024-58083}
  - Documentation: kvm: fix typo in api.rst (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: let it be known that ignore_msrs is a bad idea (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: don't include '<linux/find.h>' directly (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Maxim Levitsky) [RHEL-82917] {CVE-2024-55881}
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-82917]
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Break CONFIG_KVM_X86's direct dependency on KVM_INTEL || KVM_AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: add back X86_LOCAL_APIC dependency (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of setup_vmcs_config()" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: switch hugepage recovery thread to vhost_task (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: expose MSR_PLATFORM_INFO as a feature MSR (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: fix malformed table (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: reorganize introduction (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: replace section numbers with links (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix a few mistakes (Maxim Levitsky) [RHEL-82917]
  - KVM: powerpc: remove remaining traces of KVM_CAP_PPC_RMA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop per-VM zapped_obsolete_pages list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Remove KVM's MMU shrinker (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN if huge page recovery triggered during dirty logging (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Rename make_huge_page_split_spte() to make_small_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Recover TDP MMU huge page mappings in-place instead of zapping (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor TDP MMU iter need resched check (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Demote the WARN on yielded in xxx_cond_resched() to KVM_MMU_WARN_ON (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check yielded_gfn for forward progress iff resched is needed (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure KVM supports AVX for SEV-ES VMSA FPU test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from state test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from AMX test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual CR4.OSXSAVE enabling from CR4/CPUID sync test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify XCR0 can be "downgraded" and "upgraded" (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Configure XCR0 to max supported value by default (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rework OSXSAVE CR4=>CPUID test to play nice with AVX insns (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mask off OSPKE and OSXSAVE when comparing CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely mask off dynamic fields in CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a testcase for disabling feature MSRs init quirk (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify get/set PERF_CAPABILITIES w/o guest PDMC behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Document an erratum in KVM_SET_VCPU_EVENTS on Intel CPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: AMD's IBPB is not equivalent to Intel's IBPB (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise AMD_IBPB_RET to userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside kvm_vcpu_update_apicv() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Batch TLB flushes when zapping collapsible TDP MMU SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop @max_level from kvm_mmu_max_mapping_level() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't emit TLB flushes when aging SPTEs for mmu_notifiers (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow arch code to elide TLB flushes when aging a young page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set Dirty bit for new SPTEs, even if _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Dedup logic for detecting TLB flushes on leaf SPTE changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Stop processing TDP MMU roots for test_age if young SPTE found (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Process only valid TDP MMU roots when aging a gfn range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use Accessed bit even when _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_dirty_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_accessed_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add a dedicated flag to track if A/D bits are globally enabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN and flush if resolving a TDP MMU fault clears MMU-writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold mmu_spte_update_no_track() into mmu_spte_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop ignored return value from kvm_tdp_mmu_clear_dirty_slot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't flush TLBs when clearing Dirty bit in shadow MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force flush if SPTE update clears Accessed bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold all of make_spte()'s writable handling into one if-else (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always set SPTE's dirty bit if it's created as writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Flush remote TLBs iff MMU-writable flag is cleared from RO SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Protect vCPU's "last run PID" with rwlock, not RCU (Maxim Levitsky) [RHEL-82917]
  - KVM: Return '0' directly when there's no task to yield to (Maxim Levitsky) [RHEL-82917]
  - KVM: Rework core loop of kvm_vcpu_on_spin() to use a single for-loop (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use ARRAY_SIZE for array length (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unused macro in the hardware disable test (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove the unused variable "gpa" in __invept() (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't grab reference on VM_MIXEDMAP pfns that have a "struct page" (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop APIs that manipulate "struct page" via pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark "struct page" accessed when zapping SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: Make kvm_follow_pfn.refcounted_page a required field (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop gfn_to_pfn() APIs now that all users are gone (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Explicitly require struct page memory for Ultravisor sharing (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __gfn_to_page() when copying MTE tags to/from userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: Add support for read-only usage of gfn_to_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: Convert gfn_to_page() to use kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_vcpu_map() to map guest memory to patch dcbz instructions (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Remove extra get_page() to fix page refcount leak (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_faultin_pfn() to handle page faults on Book3s PR (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Book3S: Mark "struct page" pfns dirty/accessed after installing PTE (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Drop unused @kvm_ro param from kvmppc_book3s_instantiate_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s Radix (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s HV (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __kvm_faultin_pfn() to handle memory aborts (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Mark "struct page" pfns accessed/dirty before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use __kvm_faultin_page() to get APIC access page/pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Hold mmu_lock until page is released when updating APIC access page (Maxim Levitsky) [RHEL-82917]
  - KVM: Move x86's API to release a faultin page to common KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark unused faultin pages as accessed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put refcounted pages instead of blindly releasing pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Provide "struct page" as output from kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Convert page fault paths to kvm_faultin_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_faultin_pfn() to specifically service guest page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: Move declarations of memslot accessors up in kvm_host.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark pages/folios dirty at the origin of make_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add helper to "finish" handling a guest page fault (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add common helper to handle prefetching SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put direct prefetched pages via kvm_release_page_clean() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add "mmu" prefix fault-in helpers to free up generic names (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't fault-in APIC access page during initial allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow direct access (w/o mmu_notifier) to unpinned pfn by default (Maxim Levitsky) [RHEL-82917]
  - KVM: Get writable mapping for __kvm_vcpu_map() only when necessary (Maxim Levitsky) [RHEL-82917]
  - KVM: Pass in write/dirty to kvm_vcpu_map(), not kvm_vcpu_unmap() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Mark vmcs12's APIC access page dirty when unmapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Pin (as in FOLL_PIN) pages during kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Migrate kvm_vcpu_map() to kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: pfncache: Precisely track refcounted pages (Maxim Levitsky) [RHEL-82917]
  - KVM: Move kvm_{set,release}_page_{clean,dirty}() helpers up in kvm_main.c (Maxim Levitsky) [RHEL-82917]
  - KVM: Provide refcounted page as output field in struct kvm_follow_pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: Use plain "struct page" pointer instead of single-entry array (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop pointless msr_bitmap_map field from struct nested_vmx (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Rely on kvm_vcpu_unmap() to track validity of eVMCS mapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Use NULL for struct page pointer to indicate mremapped memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly initialize all fields at the start of kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Remove pointless sanity check on @map param to kvm_vcpu_(un)map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Introduce kvm_follow_pfn() to eventually replace "gfn_to_pfn" APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop unused "hva" pointer from __gfn_to_pfn_memslot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop kvm_page_fault.hva, i.e. don't track intermediate hva (Maxim Levitsky) [RHEL-82917]
  - KVM: Replace "async" pointer in gfn=>pfn with "no_wait" and error code (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop extra GUP (via check_user_page_hwpoison()) to detect poisoned page (Maxim Levitsky) [RHEL-82917]
  - KVM: Return ERR_SIGPENDING from hva_to_pfn() if GUP returns -EGAIN (Maxim Levitsky) [RHEL-82917]
  - KVM: Annotate that all paths in hva_to_pfn() might sleep (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop @atomic param from gfn=>pfn and hva=>pfn APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename gfn_to_page_many_atomic() to kvm_prefetch_pages() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use gfn_to_page_many_atomic() when prefetching indirect PTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark page/folio accessed only when zapping leaf SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark folio dirty when creating SPTE, not when zapping/modifying (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark new SPTE as Accessed when synchronizing existing SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Invert @can_unsync and renamed to @synchronizing (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_release_page_unused() API to put pages that KVM never consumes (Maxim Levitsky) [RHEL-82917]
  - x86/virt: Move SEV-specific parsing into arch/x86/virt/svm (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: selftests: Add regression tests for SORTL and DFLTCC CPU subfunctions (Maxim Levitsky) [RHEL-82917]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-101.el10]
changelog:
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-99005] {CVE-2025-21991}
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97117] {CVE-2025-37799}
  - scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96279]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-91254]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Phil Auld) [RHEL-92921]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Set need_freq_update in ignore_dl_rate_limit() (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Phil Auld) [RHEL-92921]
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-92921]
  - include/{topology,cpuset}: Move dl_rebuild_rd_accounting to cpuset.h (Phil Auld) [RHEL-92921]
  - sched/topology: Stop exposing partition_sched_domains_locked (Phil Auld) [RHEL-92921]
  - cgroup/cpuset: Remove partition_and_rebuild_sched_domains (Phil Auld) [RHEL-92921]
  - sched/topology: Remove redundant dl_clear_root_domain call (Phil Auld) [RHEL-92921]
  - sched/deadline: Rebuild root domain accounting after every update (Phil Auld) [RHEL-92921]
  - sched/deadline: Generalize unique visiting of root domains (Phil Auld) [RHEL-92921]
  - sched/topology: Wrappers for sched_domains_mutex (Phil Auld) [RHEL-92921]
  - sched/deadline: Ignore special tasks when rebuilding domains (Phil Auld) [RHEL-92921]
  - tracing: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - x86: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - s390: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - powerpc: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - Revert "powerpc: traps: Use PREEMPT_RT" (Phil Auld) [RHEL-92921]
  - arm64: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - lib/dump_stack: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - sched: Add a generic function to return the preemption string (Phil Auld) [RHEL-92921]
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Phil Auld) [RHEL-92921]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Phil Auld) [RHEL-92921]
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq unregistration regression (Phil Auld) [RHEL-92921]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Phil Auld) [RHEL-92921]
  - sched/membarrier: Fix redundant load of membarrier_state (Phil Auld) [RHEL-92921]
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Phil Auld) [RHEL-92921]
  - freezer, sched: Report frozen tasks as 'D' instead of 'R' (Phil Auld) [RHEL-92921]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89481]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89481]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89481]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89481]
  - redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94973]
  - PCI/TPH: Restore TPH Requester Enable correctly (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add TPH documentation (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add Steering Tag support (CKI Backport Bot) [RHEL-94973]
  - PCI: Add TLP Processing Hints (TPH) support (CKI Backport Bot) [RHEL-94973]
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Eder Zulian) [RHEL-92470]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92667]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-92667]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-92667]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-92667]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-92667]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-92667]
  - crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72768]
  - crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72768]
  - crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72768]
  - crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72768]
  - crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72768]
  - crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72768]
  - crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72768]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72768]
  - redhat: automotive: remove tech preview message (Scott Weaver) [RHEL-77268]
  - redhat: automotive: define CONFIG_RH_AUTOMOTIVE (Scott Weaver) [RHEL-77268]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-102.el10]
changelog:
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72657]
  - emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72657]
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72657]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83569]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83569]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83569]
  - ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-91256]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-84547]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-84547]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84547]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84547]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84547]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-84037]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-103.el10]
changelog:
  - redhat/spec: package full bpftool in selftests (Gregory Bell) [RHEL-91378]
  - redhat: add more namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-95481]
  - selftests/memfd/memfd_test: fix possible NULL pointer dereference (Joel Savitz) [RHEL-94834]
  - mr: consolidate the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-96599]
  - ipv6: Align behavior across nexthops during path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (CKI Backport Bot) [RHEL-96599]
  - ipv6: Do not consider link down nexthops in path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: Start path selection from the first nexthop (CKI Backport Bot) [RHEL-96599]
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-96599] {CVE-2025-22063}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94045]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94045]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94045]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: usb: Rename the RESERVE and RELEASE constants (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94045]
  - net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94831]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94831]
  - net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94831]
  - net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94831]
  - net: ena: Remove deadcode (Dennis Chen) [RHEL-94831]
  - net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94831]
  - ena: Link queues to NAPIs (Dennis Chen) [RHEL-94831]
  - ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94831]
  - mm: fix finish_fault() handling for large folios (Aristeu Rozanski) [RHEL-83854]
  - selftests/bpf: Remove with_addr.sh and with_tunnels.sh (Jerome Marchand) [RHEL-78201]
  - Build cpp selftests without source fortification (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix implicit memfd_create() for bionic (Jerome Marchand) [RHEL-78201]
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Jerome Marchand) [RHEL-78201]
  - selftests: bpf: test batch lookup on array of maps with holes (Jerome Marchand) [RHEL-78201]
  - bpf: skip non exist keys in generic_map_lookup_batch (Jerome Marchand) [RHEL-78201]
  - bpf: Handle allocation failure in acquire_lock_state (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Disambiguate get_constant_map_key() errors (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: Test constant key extraction on irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Do not extract constant map keys for irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: Fix softlockup in arena_map_free on 64k page kernel (Jerome Marchand) [RHEL-78201 RHEL-83206] {CVE-2025-21851}
  - bpf: Fix deadlock when freeing cgroup storage (Jerome Marchand) [RHEL-78201 RHEL-83311] {CVE-2024-58088}
  - bpf: avoid holding freeze_mutex during mmap operation (Jerome Marchand) [RHEL-78201 RHEL-83351] {CVE-2025-21853}
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add some tests related to 'may_goto 0' insns (Jerome Marchand) [RHEL-78201]
  - bpf: Remove 'may_goto 0' instruction in opt_remove_nops() (Jerome Marchand) [RHEL-78201]
  - bpf: Allow 'may_goto 0' instruction in verifier (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add test case for the freeing of bpf_timer (Jerome Marchand) [RHEL-78201]
  - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpf: Free element after unlock in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Bail out early in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Free special fields after unlock in htab_lru_map_delete_node() (Jerome Marchand) [RHEL-78201]
  - libbpf: Work around kernel inconsistently stripping '.llvm.' suffix (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: verifier: Add nullness elision tests (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Support eliding map lookup nullness (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Add missing newline on verbose() call (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix return zero when elf_begin failed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test (Jerome Marchand) [RHEL-78201]
  - veristat: Load struct_ops programs only once (Jerome Marchand) [RHEL-78201]
  - bpf: Send signals asynchronously if !preemptible (Jerome Marchand) [RHEL-78201]
  - veristat: Document verifier log dumping capability (Jerome Marchand) [RHEL-78201]
  - bpftool: Fix control flow graph segfault during edge creation (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add a test for kprobe multi with unique_match (Jerome Marchand) [RHEL-78201]
  - libbpf: Add unique_match option for multi kprobe (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable,enable} in bpf_cpumask_release() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in bpf_obj_free_fields() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration before calling ops->map_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration in bpf_selem_free_rcu (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when cloning sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying inode storage (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_task_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_cgrp_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in htab_elem_free (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in ->map_for_each_callback (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from LPM trie (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add kprobe session recursion check test (Jerome Marchand) [RHEL-78201]
  - bpf: Return error for missed kprobe multi bpf program execution (Jerome Marchand) [RHEL-78201]
  - bpf: Fix range_tree_set() error handling (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -std=gnu11 to BPF_CFLAGS and CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Handle prog/attach type comparison in veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -fno-strict-aliasing to BPF_CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: test bpf_for within spin lock section (Jerome Marchand) [RHEL-78201]
  - bpf: Allow bpf_for/bpf_repeat calls while holding a spinlock (Jerome Marchand) [RHEL-78201]
  - bpf/tests: Add 32 bits only long conditional jump tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Avoid generating untracked files when running bpf selftests (Jerome Marchand) [RHEL-78201]
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Jerome Marchand) [RHEL-78201]
  - bpf: Use refcount_t instead of atomic_t for mmap_count (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unused MT_ENTRY define (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: fix veristat comp mode with new stats (Jerome Marchand) [RHEL-78201]
  - bpf: Fix holes in special_kfunc_list if !CONFIG_NET (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add testcases for BPF_MUL (Jerome Marchand) [RHEL-78201]
  - bpf, verifier: Improve precision of BPF_MUL (Jerome Marchand) [RHEL-78201]
  - libbpf: Set MFD_NOEXEC_SEAL when creating memfd (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Clear out Python syntax warnings (Jerome Marchand) [RHEL-78201]
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpftool: Link zstd lib required by libelf (Jerome Marchand) [RHEL-78201]
  - veristat: Fix top source line stat collection (Jerome Marchand) [RHEL-78201]
  - bpf: lsm: Remove hook to bpf_task_storage_free (Jerome Marchand) [RHEL-78201]
  - bpf: Fix configuration-dependent BTF function references (Jerome Marchand) [RHEL-78201]
  - selftest/bpf: Replace magic constants by macros (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add tests for fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - libbpf: prog load: Allow to use fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - bpf: Add fd_array_cnt attribute for prog_load (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor check_pseudo_btf_id (Jerome Marchand) [RHEL-78201]
  - bpf: Move map/prog compatibility checks (Jerome Marchand) [RHEL-78201]
  - bpf: Add a __btf_get_by_fd helper (Jerome Marchand) [RHEL-78201]
  - bpftool: bash: Add bash completion for root_id argument (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Support dumping a specific types from file (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Validate root_type_ids early (Jerome Marchand) [RHEL-78201]
  - bpftool: man: Add missing format argument to command description (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: make BPF_TARGET_ENDIAN non-recursive to speed up *.bpf.o build (Jerome Marchand) [RHEL-78201]
  - libbpf: Extend linker API to support in-memory ELF files (Jerome Marchand) [RHEL-78201]
  - libbpf: Pull file-opening logic up to top-level functions (Jerome Marchand) [RHEL-78201]
  - bpftool: Probe for ISA v4 instruction set extension (Jerome Marchand) [RHEL-78201]
  - kbuild/btf: Propagate CONFIG_WERROR to resolve_btfids (Jerome Marchand) [RHEL-78201]
  - tools/resolve_btfids: Add --fatal_warnings option (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix fill_link_info selftest on powerpc (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add more stats into veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Consolidate kernel modules into common directory (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix segfault due to libelf functions not setting errno (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add IRQ save/restore tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Expand coverage of preempt tests to sleepable kfunc (Jerome Marchand) [RHEL-78201]
  - bpf: Improve verifier log for resource leak on exit (Jerome Marchand) [RHEL-78201]
  - bpf: Introduce support for bpf_local_irq_{save,restore} (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor mark_{dynptr,iter}_read (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor {acquire,release}_reference_state (Jerome Marchand) [RHEL-78201]
  - bpf: Consolidate locks and reference state in verifier state (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: ensure proper root namespace cleanup when test fail (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor bpf_tracing_func_proto() and remove bpf_get_probe_write_proto() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove bpf_probe_write_user() warning message (Jerome Marchand) [RHEL-78201]
  - libbpf: Improve debug message when the base BTF cannot be found (Jerome Marchand) [RHEL-78201]
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing (Jerome Marchand) [RHEL-78201]
  - samples/bpf: Remove unused variable (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: remove test_flow_dissector.sh (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate bpf flow dissectors tests to test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add network helpers to generate udp checksums (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use the same udp and tcp headers in tests under test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: document pseudo-header checksum helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: move ip checksum helper to network helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Enable generic tc actions in selftests config (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate flow_dissector namespace exclusivity test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add gre packets testing to flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: expose all subtests from flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: re-split main function into dedicated tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: replace CHECK calls with ASSERT macros in flow_dissector test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use ASSERT_MEMEQ to compare bpf flow keys (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add a macro to compare raw memory (Jerome Marchand) [RHEL-78201]
  - sched/isolation: Make use of more than one housekeeping cpu (Phil Auld) [RHEL-8694]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-104.el10]
changelog:
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89030] {CVE-2025-22104}
  - perf: Fix dangling cgroup pointer in cpuctx (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Michael Petlan) [RHEL-78197]
  - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Simplify release of SDBs and SDBTs (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Rework call to sf_disable() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix format string in pr_err() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Use sf_buffer_available() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Consistently use goto out for function exit (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Do not re-enable event after deletion (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Set bit PMU_F_ENABLED enabled after lpp() invocation (Michael Petlan) [RHEL-78197]
  - s390/cpum_cf: Correct typo CYLCE (Michael Petlan) [RHEL-78197]
  - radix-tree: add missing cleanup.h (Michael Petlan) [RHEL-78197]
  - perf tests metric-only perf stat: Fix tests 84 and 86 s390 (Michael Petlan) [RHEL-78197]
  - perf trace: Support --summary-mode=cgroup (Michael Petlan) [RHEL-78197]
  - perf test: Add perf trace summary test (Michael Petlan) [RHEL-78197]
  - perf trace: Implement syscall summary in BPF (Michael Petlan) [RHEL-78197]
  - perf trace: Add missing thread__put() in thread__e_machine() (Michael Petlan) [RHEL-78197]
  - perf trace: Free the files.max entry in files->table (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in fprintf_sys_enter() (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 source package build (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync sound/asound.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync linux/prctl.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/xtensa/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sparc/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sh/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/arm/tools/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/x86/entry/syscalls/syscall_32.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm-generic/mman.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/cputype.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync scripts/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/kvm.h with kernel (Michael Petlan) [RHEL-78197]
  - perf tools: Fix in-source libperf build (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 build by generating unistd_64.h (Michael Petlan) [RHEL-78197]
  - tools headers: Update the syscall table with the kernel sources (Michael Petlan) [RHEL-78197]
  - perf tools: Remove evsel__handle_error_quirks() (Michael Petlan) [RHEL-78197]
  - perf libunwind arm64: Fix missing close parens in an if statement (Michael Petlan) [RHEL-78197]
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources (Michael Petlan) [RHEL-78197]
  - tools/include: make uapi/linux/types.h usable from assembly (Michael Petlan) [RHEL-78197]
  - perf bpf-filter: Fix a parsing error with comma (Michael Petlan) [RHEL-78197]
  - perf report: Fix a memory leak for perf_env on AMD (Michael Petlan) [RHEL-78197]
  - perf trace: Fix wrong size to bpf_map__update_elem call (Michael Petlan) [RHEL-78197]
  - perf tools: annotate asm_pure_loop.S (Michael Petlan) [RHEL-78197]
  - perf python: Fix setup.py mypy errors (Michael Petlan) [RHEL-78197]
  - perf test: Address attr.py mypy error (Michael Petlan) [RHEL-78197]
  - perf build: Add pylint build tests (Michael Petlan) [RHEL-78197]
  - perf build: Add mypy build tests (Michael Petlan) [RHEL-78197]
  - perf build: Rename TEST_LOGS to SHELL_TEST_LOGS (Michael Petlan) [RHEL-78197]
  - tools/build: Don't pass test log files to linker (Michael Petlan) [RHEL-78197]
  - perf bench sched pipe: fix enforced blocking reads in worker_thread (Michael Petlan) [RHEL-78197]
  - perf build: filter all combinations of -flto for libperl (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: AmpereOne/AmpereOneX: Mark LD_RETIRED impacted by errata (Michael Petlan) [RHEL-78197]
  - perf trace: Fix evlist memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Fix BTF memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Make syscall table stable (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Mask off ABI type for MIPS system calls (Michael Petlan) [RHEL-78197]
  - perf build: Remove Makefile.syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Use lookup table containing multiple architectures (Michael Petlan) [RHEL-78197]
  - perf trace beauty: Add syscalltbl.sh generating all system call tables (Michael Petlan) [RHEL-78197]
  - perf thread: Add support for reading the e_machine type for a thread (Michael Petlan) [RHEL-78197]
  - perf dso: Add support for reading the e_machine type for a dso (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove struct syscalltbl (Michael Petlan) [RHEL-78197]
  - perf trace: Reorganize syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove syscall_table.h (Michael Petlan) [RHEL-78197]
  - perf dso: kernel-doc for enum dso_binary_type (Michael Petlan) [RHEL-78197]
  - perf dso: Move libunwind dso_data variables into ifdef (Michael Petlan) [RHEL-78197]
  - perf report: Disable children column for data type profiling (Michael Petlan) [RHEL-78197]
  - perf report: Allow hierarchy mode for --children (Michael Petlan) [RHEL-78197]
  - perf sort: Keep output fields in the same level (Michael Petlan) [RHEL-78197]
  - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-78197]
  - perf: intel-tpebs: Fix incorrect usage of zfree() (Michael Petlan) [RHEL-78197]
  - perf cpumap: Increment reference count for online cpumap (Michael Petlan) [RHEL-78197]
  - perf dso: fix dso__is_kallsyms() check (Michael Petlan) [RHEL-78197]
  - perf kwork: Remove unreachable judgments (Michael Petlan) [RHEL-78197]
  - perf python: Check if there is space to copy all the event (Michael Petlan) [RHEL-78197]
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Michael Petlan) [RHEL-78197]
  - perf python: Decrement the refcount of just created event on failure (Michael Petlan) [RHEL-78197]
  - perf python tracepoint.py: Change the COMM using setproctitle if available (Michael Petlan) [RHEL-78197]
  - perf python: Fixup description of sample.id event member (Michael Petlan) [RHEL-78197]
  - perf test dso-data: Correctly free test file in read test (Michael Petlan) [RHEL-78197]
  - perf dso: Use lock annotations to fix asan deadlock (Michael Petlan) [RHEL-78197]
  - perf mutex: Add annotations for LOCKS_EXCLUDED and LOCKS_RETURNED (Michael Petlan) [RHEL-78197]
  - perf test: Add pipe output testing for annotate (Michael Petlan) [RHEL-78197]
  - perf test: Fixes to variable expansion and stdout for diff test (Michael Petlan) [RHEL-78197]
  - perf libunwind: Fixup conversion perf_sample->user_regs to a pointer (Michael Petlan) [RHEL-78197]
  - perf script: Update brstack syntax documentation (Michael Petlan) [RHEL-78197]
  - perf script: Fix typo in branch event mask (Michael Petlan) [RHEL-78197]
  - perf hist stdio: Do bounds check when printing callchains to avoid UB with new gcc versions (Michael Petlan) [RHEL-78197]
  - perf units: Fix insufficient array space (Michael Petlan) [RHEL-78197]
  - perf annotate: Add --code-with-type option. (Michael Petlan) [RHEL-78197]
  - perf annotate: Implement code + data type annotation (Michael Petlan) [RHEL-78197]
  - perf annotate: Factor out __hist_entry__get_data_type() (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass hist_entry to annotate functions (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass annotation_options to annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate: Remove unused len parameter from annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Add annotated_data_type__get_member_name() (Michael Petlan) [RHEL-78197]
  - perf ftrace: Use atomic inc to update histogram in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Remove an unnecessary condition check in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Fix latency stats with BPF (Michael Petlan) [RHEL-78197]
  - perf test stat: Additional topdown grouping tests (Michael Petlan) [RHEL-78197]
  - perf x86 evlist: Update comments on topdown regrouping (Michael Petlan) [RHEL-78197]
  - perf parse-events: Corrections to topdown sorting (Michael Petlan) [RHEL-78197]
  - perf tools: Improve handling of hybrid PMUs in perf_event_attr__fprintf (Michael Petlan) [RHEL-78197]
  - perf python tracepoint: Switch to using parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist.config to set up record options (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist all_cpus accessor (Michael Petlan) [RHEL-78197]
  - perf python: Avoid duplicated code in get_tracepoint_field (Michael Petlan) [RHEL-78197]
  - perf python: Update ungrouped evsel leader in clone (Michael Petlan) [RHEL-78197]
  - perf python: Add optional cpus and threads arguments to parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add member access to a number of evsel variables (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist enable and disable methods (Michael Petlan) [RHEL-78197]
  - perf evlist: Add success path to evlist__create_syswide_maps (Michael Petlan) [RHEL-78197]
  - perf debug: Avoid stack overflow in recursive error message (Michael Petlan) [RHEL-78197]
  - perf symbol: Support .gnu_debugdata for symbols (Michael Petlan) [RHEL-78197]
  - perf tools: Add LZMA decompression from FILE (Michael Petlan) [RHEL-78197]
  - perf tools: Add dummy functions for !HAVE_LZMA_SUPPORT (Michael Petlan) [RHEL-78197]
  - perf mem: Don't leak mem event names (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P650 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P550 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x0d events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x07 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Update SiFive Bullet events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Remove leading zeroes (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Rename U74 to Bullet (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_config__refresh (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_pmus__default_pmu_name (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_data__update_dir (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused pstack__pop (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_color_default_config (Michael Petlan) [RHEL-78197]
  - perf tests: Fix data symbol test with LTO builds (Michael Petlan) [RHEL-78197]
  - perf report: Fix memory leaks in the hierarchy mode (Michael Petlan) [RHEL-78197]
  - perf report: Use map_symbol__copy() when copying callchains (Michael Petlan) [RHEL-78197]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Michael Petlan) [RHEL-78197]
  - perf annotate: Add annotation_options.disassembler_used (Michael Petlan) [RHEL-78197]
  - perf report: Do not process non-JIT BPF ksymbol events (Michael Petlan) [RHEL-78197]
  - perf test: Fix leak in "Synthesize attr update" test (Michael Petlan) [RHEL-78197]
  - perf machine: Fix insertion of PERF_RECORD_KSYMBOL related kernel maps (Michael Petlan) [RHEL-78197]
  - perf maps: Add missing map__set_kmap_maps() when replacing a kernel map (Michael Petlan) [RHEL-78197]
  - perf maps: Fixup maps_by_name when modifying maps_by_address (Michael Petlan) [RHEL-78197]
  - perf maps: Set the kmaps for newly created/added kernel maps (Michael Petlan) [RHEL-78197]
  - perf script: Fix output type for dynamically allocated core PMU's (Michael Petlan) [RHEL-78197]
  - perf bench: Fix perf bench syscall loop count (Michael Petlan) [RHEL-78197]
  - perf test: Simplify data symbol test (Michael Petlan) [RHEL-78197]
  - perf test: Add timeout to datasym workload (Michael Petlan) [RHEL-78197]
  - perf test: Add trace record and replay test (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf trace tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test trace_btf_general: Fix shellcheck warning (Michael Petlan) [RHEL-78197]
  - perf trace: Add tests for BTF general augmentation (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf probe tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test: Add --metric-only to perf stat output tests (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Support previous branch target (PBT) address (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Add branch stack (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Set sample flags with supplement info (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fill branch operations and events to record (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Decode transactional event (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Extend branch operations (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fix load-store operation checking (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branch stack (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branches (Michael Petlan) [RHEL-78197]
  - perf script: Separate events from branch types (Michael Petlan) [RHEL-78197]
  - perf script: Refactor sample_flags_to_name() function (Michael Petlan) [RHEL-78197]
  - perf script: Make printing flags reliable (Michael Petlan) [RHEL-78197]
  - perf stat: Fix non-uniquified hybrid legacy events (Michael Petlan) [RHEL-78197]
  - perf tools: Skip BPF sideband event for userspace profiling (Michael Petlan) [RHEL-78197]
  - perf test: Fix spelling mistake "sythesizing" -> "synthesizing" (Michael Petlan) [RHEL-78197]
  - perf build: Fix in-tree build due to symbolic link (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Report error if set frequency (Michael Petlan) [RHEL-78197]
  - perf lock: Report owner stack in usermode (Michael Petlan) [RHEL-78197]
  - perf lock: Make rb_tree helper functions generic (Michael Petlan) [RHEL-78197]
  - perf lock: Retrieve owner callstack in bpf program (Michael Petlan) [RHEL-78197]
  - perf lock: Add bpf maps for owner stack tracing (Michael Petlan) [RHEL-78197]
  - perf cpumap: Reduce cpu size from int to int16_t (Michael Petlan) [RHEL-78197]
  - perf list: Document -v option deduplication feature (Michael Petlan) [RHEL-78197]
  - perf pmu: Don't double count common sysfs and json events (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: allow to hide empty buckets (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: variable histogram buckets (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Handle direct use of stack pointer without fbreg (Michael Petlan) [RHEL-78197]
  - perf report: Fix sample number stats for branch entry mode (Michael Petlan) [RHEL-78197]
  - perf machine: Reuse module path buffer (Michael Petlan) [RHEL-78197]
  - perf hwmon_pmu: Switch event discovery to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Switch tracepoints to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf events: Remove scandir in thread synthesis (Michael Petlan) [RHEL-78197]
  - perf header: Switch mem topology to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf maps: Switch modules tree walk to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Tidy name token matching (Michael Petlan) [RHEL-78197]
  - perf tools: Improve startup time by reducing unnecessary stat() calls (Michael Petlan) [RHEL-78197]
  - perf report: Fix input reload/switch with symbol sort key (Michael Petlan) [RHEL-78197]
  - perf report: Support switching data w/ and w/o callchains (Michael Petlan) [RHEL-78197]
  - perf report: Switch data file correctly in TUI (Michael Petlan) [RHEL-78197]
  - perf tools: Fix up some comments and code to properly use the event_source bus (Michael Petlan) [RHEL-78197]
  - perf list: Also append PMU name in verbose mode (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Fix incorrect CPU_CYCLE in metrics expr (Michael Petlan) [RHEL-78197]
  - perf hist: Shrink struct hist_entry size (Michael Petlan) [RHEL-78197]
  - perf test: Add tests for latency and parallelism profiling (Michael Petlan) [RHEL-78197]
  - perf report: Add latency and parallelism profiling documentation (Michael Petlan) [RHEL-78197]
  - perf report: Add --latency flag (Michael Petlan) [RHEL-78197]
  - perf report: Add latency output field (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism filter (Michael Petlan) [RHEL-78197]
  - perf report: Switch filtered from u8 to u16 (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism sort key (Michael Petlan) [RHEL-78197]
  - perf report: Add machine parallelism (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compile error on sample->user_regs (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compilation error on arm64 (Michael Petlan) [RHEL-78197]
  - tools build: Fix a number of Wconversion warnings (Michael Petlan) [RHEL-78197]
  - perf sample: Make user_regs and intr_regs optional (Michael Petlan) [RHEL-78197]
  - perf test stat_all_metrics: Ensure missing events fail test (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf tools: Use symfs when opening debuginfo by path (Michael Petlan) [RHEL-78197]
  - perf trace: Add --summary-mode option (Michael Petlan) [RHEL-78197]
  - perf tools: Get rid of now-unused rb_resort.h (Michael Petlan) [RHEL-78197]
  - perf trace: Convert syscall_stats to hashmap (Michael Petlan) [RHEL-78197]
  - perf trace: Allocate syscall stats only if summary is on (Michael Petlan) [RHEL-78197]
  - perf tools: Deadcode removal (Michael Petlan) [RHEL-78197]
  - perf stat: Changes to event name uniquification (Michael Petlan) [RHEL-78197]
  - perf stat: Don't merge counters purely on name (Michael Petlan) [RHEL-78197]
  - perf test: Use cycles event in perf record test for leader_sampling (Michael Petlan) [RHEL-78197]
  - perf test: Fix perf record test for precise_max (Michael Petlan) [RHEL-78197]
  - perf: Always feature test reallocarray (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add V3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add N3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf trace: Fix return value of trace__fprintf_tp_fields (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Michael Petlan) [RHEL-78197] {CVE-2025-37936}
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Only check the group flag for X86 leader (Michael Petlan) [RHEL-78197]
  - perf/core: Change to POLLERR for pinned events with error (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Michael Petlan) [RHEL-78197]
  - perf: Fix hang while freeing sigtrap event (Michael Petlan) [RHEL-78197] {CVE-2025-37747}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Michael Petlan) [RHEL-78197] {CVE-2025-37878}
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc/pmu: Update comment description to mention ISA v3.1 for power10 and above (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Add check for power11 pvr for pmu selfests (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Enable pmu selftests for power11 (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Michael Petlan) [RHEL-78197]
  - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-78197]
  - perf: arm_pmu: Move PMUv3-specific data (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Replace Pentium 4 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/mm/pat: Replace Intel x86_model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 5 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 15 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/microcode: Update the Intel processor flag scan check (Michael Petlan) [RHEL-78197]
  - x86/cpu: Update Intel Family comments (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Simplify Intel PMU initialization (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Use cache cpu-type for hybrid PMU selection (Michael Petlan) [RHEL-78197]
  - perf: Clean up pmu specific data (Michael Petlan) [RHEL-78197]
  - perf/x86: Remove swap_task_ctx() (Michael Petlan) [RHEL-78197]
  - perf/x86/lbr: Fix shorter LBRs call stacks for the system-wide mode (Michael Petlan) [RHEL-78197]
  - perf: Supply task information to sched_task() (Michael Petlan) [RHEL-78197]
  - perf: attach/detach PMU specific data (Michael Petlan) [RHEL-78197]
  - locking/percpu-rwsem: Add guard support (Michael Petlan) [RHEL-78197]
  - perf: Save PMU specific data in task_struct (Michael Petlan) [RHEL-78197]
  - perf: Extend per event callchain limit to branch stack (Michael Petlan) [RHEL-78197]
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Michael Petlan) [RHEL-78197]
  - perf/core: Use POLLHUP for pinned events in error (Michael Petlan) [RHEL-78197]
  - perf/core: Use sysfs_emit() instead of scnprintf() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove optional 'size' arguments from strscpy() calls (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Check if bts_ctx is allocated when calling BTS functions (Michael Petlan) [RHEL-78197]
  - perf/x86: Annotate struct bts_buffer::buf with __counted_by() (Michael Petlan) [RHEL-78197]
  - perf/core: Clean up perf_try_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Fix perf_mmap() failure path (Michael Petlan) [RHEL-78197]
  - perf/core: Detach 'struct perf_cpu_pmu_context' and 'struct pmu' lifetimes (Michael Petlan) [RHEL-78197]
  - perf/core: Lift event->mmap_mutex in perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove retry loop from perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Further simplify perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_mmap() control flow (Michael Petlan) [RHEL-78197]
  - perf/bpf: Robustify perf_event_free_bpf_prog() (Michael Petlan) [RHEL-78197]
  - perf/core: Introduce perf_free_addr_filters() (Michael Petlan) [RHEL-78197]
  - perf/core: Add this_cpc() helper (Michael Petlan) [RHEL-78197]
  - perf/core: Merge struct pmu::pmu_disable_count into struct perf_cpu_pmu_context::pmu_disable_count (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_event_alloc() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_pmu_register() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_pmu_register() error path (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_event_alloc() error path (Michael Petlan) [RHEL-78197]
  - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Allocate bts_ctx only if necessary (Michael Petlan) [RHEL-78197]
  - perf/core: Move perf_event sysctls into kernel/events (Michael Petlan) [RHEL-78197]
  - const_structs.checkpatch: add ctl_table (Michael Petlan) [RHEL-78197]
  - sysctl: make internal ctl_tables const (Michael Petlan) [RHEL-78197]
  - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Update DTLB/PageSize decode logic (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add support for OP Load Latency Filtering (Michael Petlan) [RHEL-78197]
  - x86/events/amd/iommu: Increase IOMMU_NAME_SIZE (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Support PEBS counters snapshotting (Michael Petlan) [RHEL-78197]
  - perf: Avoid the read if the count is already updated (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Apply static call for drain_pebs (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Ceil sample_period to min_period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add ->check_period() callback (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add PMU specific minimum period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Don't allow freq mode event creation through ->config interface (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove pointless sample period check (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros (Michael Petlan) [RHEL-78197]
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix nid mismatch in alloc_surplus_hugetlb_folio() (Nico Pache) [RHEL-77742]
  - mm: (un)track_pfn_copy() fix + doc improvements (Nico Pache) [RHEL-77742]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix deadlock on cpu_hotplug_lock in __accept_page() (Nico Pache) [RHEL-77742]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Nico Pache) [RHEL-77742] {CVE-2025-37774}
  - mm: fix apply_to_existing_page_range() (Nico Pache) [RHEL-77742]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages (Nico Pache) [RHEL-77742]
  - mm/compaction: fix bug in hugetlb handling pathway (Nico Pache) [RHEL-77742]
  - mm: lock PGDAT_RECLAIM_LOCKED with acquire memory ordering (Nico Pache) [RHEL-77742]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Nico Pache) [RHEL-77742]
  - mm/hugetlb: update nr_huge_pages and surplus_huge_pages together (Nico Pache) [RHEL-77742]
  - mm: remove the access_ok() call from gup_fast_fallback() (Nico Pache) [RHEL-77742]
  - mm/damon/ops: have damon_get_folio return folio even for tail pages (Nico Pache) [RHEL-77742]
  - mm, percpu: do not consider sleepable allocations atomic (Nico Pache) [RHEL-77742]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (Nico Pache) [RHEL-77742] {CVE-2025-22090}
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Nico Pache) [RHEL-77742]
  - mm: slub: call WARN() when detecting a slab corruption (Nico Pache) [RHEL-77742]
  - mm: slub: Print the broken data before restoring them (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Nico Pache) [RHEL-77742]
  - memcg: drain obj stock on cpu hotplug teardown (Nico Pache) [RHEL-77742]
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs (Nico Pache) [RHEL-77742] {CVE-2025-22000}
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Nico Pache) [RHEL-77742]
  - mm/vma: do not register private-anon mappings with khugepaged during mmap (Nico Pache) [RHEL-77742]
  - mm/migrate: fix shmem xarray update during migration (Nico Pache) [RHEL-77742] {CVE-2025-22015}
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page() (Nico Pache) [RHEL-77742]
  - filemap: move prefaulting out of hot write path (Nico Pache) [RHEL-77742]
  - Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[] for empty zone" (Nico Pache) [RHEL-77742]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Nico Pache) [RHEL-77742] {CVE-2025-21908}
  - mm: abort vma_modify() on merge out of memory failure (Nico Pache) [RHEL-77742] {CVE-2025-21932}
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Nico Pache) [RHEL-77742] {CVE-2025-21931}
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Nico Pache) [RHEL-77742]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Nico Pache) [RHEL-77742] {CVE-2025-21907}
  - mm: hugetlb: avoid fallback for specific node allocation of 1G pages (Nico Pache) [RHEL-77742]
  - memcg: avoid dead loop when setting memory.max (Nico Pache) [RHEL-77742]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Nico Pache) [RHEL-77742]
  - mm: gup: fix infinite loop within __get_longterm_locked (Nico Pache) [RHEL-77742]
  - kfence: skip __GFP_THISNODE allocations on NUMA systems (Nico Pache) [RHEL-77742]
  - mm: kmemleak: fix upper boundary check for physical address objects (Nico Pache) [RHEL-77742]
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios (Nico Pache) [RHEL-77742]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Nico Pache) [RHEL-77742] {CVE-2025-21815}
  - mm/hugetlb: don't map folios writable without VM_WRITE when copying during fork() (Nico Pache) [RHEL-77742]
  - readahead: properly shorten readahead when falling back to do_page_cache_ra() (Nico Pache) [RHEL-77742]
  - readahead: don't shorten readahead window in read_pages() (Nico Pache) [RHEL-77742]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-81470] {CVE-2025-21759}
  - netfilter: ipset: fix region locking in hash types (CKI Backport Bot) [RHEL-96611]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-92771]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-92771]
  - selftests: net: use slowwait to make sure IPv6 setup finished (Hangbin Liu) [RHEL-83477]
  - selftests: net: use slowwait to stabilize vrf_route_leaking test (Hangbin Liu) [RHEL-84202]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Chunyu Hu) [RHEL-87655]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Chunyu Hu) [RHEL-87655]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Chunyu Hu) [RHEL-87655]
  - scsi: lpfc: Copyright updates for 14.4.0.9 patches (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Update lpfc version to 14.4.0.9 (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Create lpfc_vmid_info sysfs entry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Notify FC transport of rport disappearance during PCI fcn reset (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Use memcpy() for BIOS version (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag (Dick Kennedy) [RHEL-89473]
  - selftests: netfilter: nft_queue.sh: include file transfer duration in log message (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_queue.sh: fix warnings with socat 1.8.0.0 (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: run conntrack_dump_flush in netns (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: Add missing gitignore file (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_nat.sh: add test for reverse clash with nat (CKI Backport Bot) [RHEL-99656]
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (CKI Backport Bot) [RHEL-99656]
  - ipvs: fix uninit-value for saddr in do_output_route4 (CKI Backport Bot) [RHEL-99471]
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (CKI Backport Bot) [RHEL-99471]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-105.el10]
changelog:
  - loop: move lo_set_size() out of queue freeze (Ming Lei) [RHEL-88159]
  - scsi: qla2xxx: Update version to 10.02.09.400-k (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix abort in bsg timeout (Nilesh Javali) [RHEL-90558]


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67335):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79184,
    RHEL-79185, RHEL-79188, RHEL-79189, RHEL-79191, RHEL-79193, RHEL-79203):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000390;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-08/0xe0 microcode at revision 0x4123;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x100 up to 0x102;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
    (RHEL-94853)
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-91227, RHEL-91242, RHEL-91234):
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb8 up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfc up to 0x100;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x102 up to 0x104;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9;


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.27-1
changelog:
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-82120
  - Update afterburn file transition policy
  Resolves: RHEL-82120
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-82120
  - Allow afterburn list ssh home directory
  Resolves: RHEL-82120
  - Confine tuned-ppd
  Resolves: RHEL-69450
  - Update ktls policy
  Resolves: RHEL-74424
  - Add the switcheroo module
  Resolves: RHEL-83267
  - Update switcheroo policy
  Resolves: RHEL-83267
  - Confine the switcheroo-control service
  Resolves: RHEL-83267


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.28-1
changelog:
  - Change path of tuned and tuned-ppd to /usr/sbin
  Resolves: RHEL-69450
  - Update the pcmsensor policy
  Resolves: RHEL-80452
  - Allow dovecot-deliver read mail aliases
  Resolves: RHEL-80153
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-75471
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82299
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82299
  - Allow cifs.idmap helper to set attributes on kernel keys
  Resolves: RHEL-83921
  - Remove ktls from modules-filtered.lst
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.29-1
changelog:
  - Revert "Dontaudit access of virt-related permissive domains"
  Resolves: RHEL-79833
  - Remove permissive domains
  Resolves: RHEL-82672


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.30-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-87418
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-87372
  - Allow systemd-user-runtime-dir get/set tmpfs quotas
  Resolves: RHEL-86789
  - Allow systemd-user-runtime-dir delete gnome homedir content
  Resolves: RHEL-86789
  - Confine /usr/lib/systemd/systemd-user-runtime-dir
  Resolves: RHEL-86789
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-86528
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-86258
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-85849
  - Allow virt_domain write to virt_image_t files
  Resolves: RHEL-85319
  - Allow rhsmcertd connect to systemd-machined
  Resolves: RHEL-83925
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77779
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-77087
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-62185
  - Allow tlshd read network sysctls
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.31-1
changelog:
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-89804
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-87727
  - Allow syslogd watch syslog_conf_t directories
  Resolves: RHEL-87648
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-86780
  - Define file equivalency for /var/etc
  Resolves: RHEL-86678
  - Update bootupd policy when ESP is not mounted
  Resolves: RHEL-86588
  - dontaudit execmem for modemmanager
  Resolves: RHEL-86176
  - Allow systemd create journal pid files
  Resolves: RHEL-72692
  - Allow virtqemud read/write/setattr input event devices
  Resolves: RHEL-46385


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.32-1
changelog:
  - Backport policy for additional systemd generators from rawhide
  Resolves: RHEL-36740
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-56344
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-86588


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.33-1
changelog:
  - Allow systemd_generator read files in /proc and /sys
  Resolves: RHEL-36740
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-54019
  - Allow utempter use terminal multiplexor
  Resolves: RHEL-56344
  - Allow virtqemud execute ovs-vsctl with a domain transition
  Resolves: RHEL-65322
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-70730
  - Allow tomcat execute cracklib-check with a domain transition
  Resolves: RHEL-82090
  - Update the files_search_mnt() interface
  Resolves: RHEL-85178
  - Allow key.dns_resolve set attributes on the kernel key ring
  Resolves: RHEL-91602
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93535
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.34-1
changelog:
  - Allow systemd-coredump the sys_admin capability
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-97586
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-97586
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump sys_admin capability
  Resolves: RHEL-97586
  - Allow svirt-tcg read init state
  Resolves: RHEL-95725
  - Allow virtqemud create and unlink files in /etc/libvirt/
  Resolves: RHEL-95725
  - Allow virtqemud send a generic signal to passt
  Resolves: RHEL-44994
  - Allow openvswitch ioctl vduse devices
  Resolves: RHEL-93041
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  Resolves: RHEL-93041
  - Allow virtstoraged the sys_rawio capability
  Resolves: RHEL-44639
  - Allow virtstoraged fsetid capability
  Resolves: RHEL-44639
  - Allow virtqemud additional permissions on scsi generic chr files
  Resolves: RHEL-44628
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - Fix files_dontaudit_delete_all_files()
  Resolves: RHEL-86789
  - Allow virtnodedev create mdevctl config dirs
  Resolves: RHEL-98559
  - Allow cryptsetup-generator manage systemd unit files
  Resolves: RHEL-98656


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John Kacur <jkacur@redhat.com> - 0.19-7
changelog:
  - Add missing patch to prevents tuna gui from starting if display not available
  - remove oscilloscope which is unsupported in rhel
  - Add rpmsinpect.yaml and gating.yaml
  - Add tests dir
  - update the current version of python-linux-procfs as a requires
  Resolves: RHEL-30171


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


