# changelog

author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.5-1
changelog:
  - Upgrade to 1.51.5 (dev)
  - Never retry ACD on NOARP interfaces (RHEL-47301)
  - Delete routes added by NM to tables different than main (RHEL-67324)
  - Honor route-table property for the route to VPN server (RHEL-69901)
  - Send GARP on bonding-slb failover (RHEL-59558)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.51.6-1
changelog:
  - Update to 1.51.6 (dev)
  - Honor the routing-rules property for VPN connections (RHEL-69899)
  - Fix potential crash when ipv4.dhcp-send-release is enabled (RHEL-67918)
  - Support encrypted DNS servers (RHEL-66260)
  - Fix configuration of VLAN ingress/egress QoS mapping (RHEL-72475)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.51.7-1
changelog:
  - Update to 1.51.7 (dev)
  - Add support in initramfs generator for parsing NM eDNS configuration (RHEL-70420)
  - Add new dnsconfd DNS backend (RHEL-67917)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokryvk <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove %systemd_preun from %preun scriptlet, as it was causing troubles when removing audit
    Related: RHEL-14896


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-52
changelog:
  - bz2210899 - amd map format netgoup selector function not working
    - fix use_ignore_mount_option description.
    - include addtional log info for mounts.
    - fix amd selector function matching.
    - get rid entry thid field.
    - continue expire immediately after submount check.
    - add buffer length checks to autofs mount_mount().
    - eliminate realpath from mount of submount.
    - eliminate root param from autofs mount and umount.
    - remove redundant fstat from do_mount_direct().
    - get rid of strlen call in handle_packet_missing_direct().
    - remove redundant stat call in lookup_ghost().
    - set mapent dev and ino before adding to index.
    - change to use printf functions in amd parser.
    - dont call umount_subtree_mounts() on parent at umount.
    - dont take parent source lock at mount shutdown.
    - eliminate buffer usage from handle_mounts_cleanup().
    - fix possible use after free in handle_mounts_exit().
    - make submount cleanup the same as top level mounts.
    - add soucre parameter to module functions.
    - add ioctlfd open helper.
    - make open files limit configurable.
  - Resolves: rhbz#2210899


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-53
changelog:
  - bz2215661 - The sss lookup modules handles error return incorrectly in
    some cases
    - fix some sss error return cases.
  - Resolves: rhbz#2215661


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-54
changelog:
  - bz2223236 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix incorrect matching of cached wildcard key.
  - Resolves: rhbz#2223236


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-55
changelog:
  - bz2223252 - filesystems mount and expire immediately
    - fix expire retry looping.
    - correct day in changelog entry for revision 53.
  - Resolves: rhbz#2223252


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-56
changelog:
  - RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: RHEL-13083


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-57
changelog:
  - RHEL-13084 - multi mount detection fails for share with blank+dash causing
    SEGV crash
    - fix multi-mount check.
  - Resolves: RHEL-13084


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-58
changelog:
  - RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-19731


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-59
changelog:
  - RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
  - Resolves: RHEL-69485
  - RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.
    - fix lookup search type in umount_subtree_mounts().
    - fix remount_active_mount() not remounting symlinks.
    - log when setting amd per-mount timeout.
    - update per-mount expire timeout on readmap.
    - clear per-mount timeout if not set.
  - Resolves: RHEL-71359
  - RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
    - fix submount shutdown race.
  - Resolves: RHEL-57466


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-60
changelog:
  - RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
    - fix deadlock in master_notify_submount().
  - Resolves: RHEL-77321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-61
changelog:
  - RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
    incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
    - handle sss special case getautomntbyname() error
  - Resolves: RHEL-32684


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-91
changelog:
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-91
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-91.3
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240815-1.gite217f03
changelog:
  - java: start controlling / disable DTLSv1.0
  - java: disable anon ciphersuites, tying them to NULL
  - java: respect more key size restrictions
  - java: specify jdk.tls.namedGroups system property
  - java: make hash, mac and sign more orthogonal
  - fips-mode-setup: add another scary "unsupported"
  - fips-mode-setup: flashy ticking warning upon use
  - java: use and include jdk.disabled.namedCurves
  - ec_min_size: introduce and use in java, default to 256
  - java: stop specifying jdk.tls.namedGroups in javasystem
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-17
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-18
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Marek Blaha <mblaha@redhat.com> - 4.14.0-19
changelog:
  - Catch more specific OSError instead of SMTPException in dnf-automatic email
    emitter (RHEL-49743)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3.0-2
changelog:
  - fix intermittent test failures (RHEL-82109)
  - fix source-sh test with non-default manpath (RHEL-82109)


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Martin Osvald <mosvald@redhat.com> - 3.16-3
changelog:
  - Add ownership of /etc/default, /usr/share/X11/fonts,
    /usr/share/fish, /usr/share/zsh
  - Improve directory creation to avoid 'Argument list too long' error
    Resolves: RHEL-35327
    Resolves: RHEL-1337
    Resolves: RHEL-1338


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-96
changelog:
  - Fixes for several CVEs
  - Resolves: CVE-2024-45779 CVE-2024-45778 CVE-2025-1118
  - Resolves: CVE-2025-0677 CVE-2024-45782 CVE-2025-0690
  - Resolves: CVE-2024-45783 CVE-2025-0624 CVE-2024-45776
  - Resolves: CVE-2025-0622 CVE-2024-45774 CVE-2024-45775
  - Resolves: CVE-2024-45781 CVE-2024-45780
  - Resolves: #RHEL-79700
  - Resolves: #RHEL-79341
  - Resolves: #RHEL-79875
  - Resolves: #RHEL-79849
  - Resolves: #RHEL-79707
  - Resolves: #RHEL-79857
  - Resolves: #RHEL-79709
  - Resolves: #RHEL-79846
  - Resolves: #RHEL-75737
  - Resolves: #RHEL-79713
  - Resolves: #RHEL-73785
  - Resolves: #RHEL-73787
  - Resolves: #RHEL-79704
  - Resolves: #RHEL-79702


author: Nicolas Frayer <nfrayer@redhat.com> 2.06-99
changelog:
  - Added the following 2 commits to optimize memory consumption
  - tpm: Disable the tpm verifier if the TPM device is not present
  - powerpc: increase MIN RMA size for CAS negotiation
  - Resolves: #RHEL-76558


author: Nicolas Frayer <nfrayer@redhat.com> 2.06-104
changelog:
  - fs/xfs: Sync with latest xfs upstream
  - Resolves: #RHEL-85960
  - (NVR bump to catch up with zstream)


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Eugene Syromiatnikov <esyr@redhat.com> - 23.11-2
changelog:
  - Revert commit "lib: update detection of non-architectural L3CAT" that removed
    L3CAT detection support on Tiger Lake and Erkhart Lake CPUs (RHEL-22729)


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Andrea Claudi <aclaudi@redhat.com> - 1.2.2-1.el9
changelog:
  - New version 1.2.2 (Andrea Claudi) [RHEL-77280]
  - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240603-144
changelog:
  - [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
  - CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
  - linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240716-145
changelog:
  - [Intel 9.5 FEAT] [SRF] QAT_402XX firmware update (RHEL-47355)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  Resolves: RHEL-47355


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240905-146
changelog:
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54252)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54240)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  Resolves: RHEL-54252, RHEL-54240


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241021-147
changelog:
  - Update linux-firmware to latest upstream (RHEL-63635)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile: error out of 'install' if COPYOPTS is set
  - check_whence.py: skip some validation if git ls-files fails
  - qcom: Add Audio firmware for X1E80100 CRD/QCPs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - brcm: replace NVRAM for Jetson TX1
  - rtlwifi: Update firmware for RTL8192FU to v7.3
  - make: separate installation and de-duplication targets
  - check_whence.py: check the permissions
  - Remove execute bit from firmware files
  - configure: remove unused file
  - rtl_nic: add firmware rtl8125d-1
  - iwlwifi: add gl/Bz FW for core91-69 release
  - iwlwifi: update ty/So/Ma firmwares for core91-69 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into wcn785x
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: add board-2.bin
  - copy-firmware.sh: rename variables in symlink hanlding
  - copy-firmware.sh: remove no longer reachable test -L
  - copy-firmware.sh: remove no longer reachable test -f
  - copy-firmware.sh: call ./check_whence.py before parsing the file
  - copy-firmware.sh: warn if the destination folder is not empty
  - copy-firmware.sh: add err() helper
  - copy-firmware.sh: fix indentation
  - copy-firmware.sh: reset and consistently handle destdir
  - Revert "copy-firmware: Support additional compressor options"
  - copy-firmware.sh: flesh out and fix dedup-firmware.sh
  - Style update yaml files
  - editorconfig: add initial config file
  - check_whence.py: annotate replacement strings as raw
  - check_whence.py: LC_ALL=C sort -u the filelist
  - check_whence.py: ban link-to-a-link
  - check_whence.py: use consistent naming
  - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin
  - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31
  - rtlwifi: Add firmware v39.0 for RTL8192DU
  - Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
  - QCA: Add Bluetooth firmwares for WCN785x with UART transport
  - amdgpu: DMCUB DCN35 update
  - brcm: Add BCM4354 NVRAM for Jetson TX1
  - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
  - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
  - linux-firmware: add firmware for MT7920
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - qcom: update gpu firmwares for qcm6490 chipset
  - mt76: mt7996: add firmware files for mt7992 chipset
  - mt76: mt7996: add firmware files for mt7996 chipset variants
  - qcom: add gpu firmwares for sa8775p chipset
  - amdgpu: update DMCUB to v0.0.233.0 DCN351
  - rtw89: 8922a: add fw format-2 v0.35.42.1
  - copy-firmware: Handle links to uncompressed files
  - WHENCE: Fix battmgr.jsn entry type
  - amdgpu: Add VPE 6.1.3 microcode
  - amdgpu: add SDMA 6.1.2 microcode
  - amdgpu: Add support for PSP 14.0.4
  - amdgpu: add GC 11.5.2 microcode
  - qcom: qcm6490: add ADSP and CDSP firmware
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
  - realtek: rt1320: Add patch firmware of MCU
  - i915: Update MTL DMC v2.23
  Resolves: RHEL-63635


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241121-148
changelog:
  - Update linux-firmware to latest upstream (RHEL-68406)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  - xe: Update LNL GSC to v104.0.0.1263
  - i915: Update MTL/ARL GSC to v102.1.15.1926
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - mediatek: Add sof-tolg for mt8195
  - i915: Add Xe3LPD DMC
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add firmware for Cirrus CS35L41
  - linux-firmware: Update firmware file for Intel BlazarU core
  Resolves: RHEL-68406


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250114-149
changelog:
  - Update linux-firmware to latest upstream (RHEL-73843)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - QCA: Add Bluetooth nvm files for WCN785x
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  Resolves: RHEL-73843


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-150
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78576)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  Resolves: RHEL-78576


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-151
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38587)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38587


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-571.el9]
changelog:
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Eric Auger) [RHEL-68997]
  - PCI: qcom: Update ICC and OPP values after Link Up event (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Allow exact number of clocks only (Myron Stowe) [RHEL-67693]
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Myron Stowe) [RHEL-67693]
  - PCI: Hold rescan lock while adding devices during host probe (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove unused BILLION macro (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove .*.cmd files with make clean (Myron Stowe) [RHEL-67693]
  - PCI: Fix typos (Myron Stowe) [RHEL-67693]
  - PCI/VPD: Remove pci_vpd_release() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI/PM: Remove __pci_pme_wakeup() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI: Make pci_bus_type constant (Myron Stowe) [RHEL-67693]
  - x86/PCI: Check pcie_find_root_port() return for NULL (Myron Stowe) [RHEL-67693]
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Myron Stowe) [RHEL-67693]
  - PCI: Add ACS quirk for Qualcomm SA8775P (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: xilinx-xdma: Add schemas for Xilinx QDMA PCIe Root Port Bridge (Myron Stowe) [RHEL-67693]
  - arm64: zynqmp: Add PCIe phys property for ZCU102 (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Add PHY support (Myron Stowe) [RHEL-67693]
  - dt-bindings: pci: xilinx-nwl: Add phys property (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Clean up clock on probe failure/removal (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Rate-limit misc interrupt messages (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix register misspelling (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Fix indentation issue in vmd_shutdown() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-ep: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-host: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - PCI: rcar-gen4: Make read-only const array check_addr static (Myron Stowe) [RHEL-67693]
  - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add RX lane margining settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add equalization settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Always cache the maximum link speed value in dw_pcie::max_link_speed (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enumerate endpoints based on Link up event in 'global_irq' interrupt (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add 'global' interrupt (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Modify 'global_irq' and 'perst_irq' IRQ device names (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Assign PCI domain number for endpoint controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Document 'linux,pci-domain' property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Update Maintainers (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Reword the error message for receiving unknown global IRQ event (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Drop the redundant masking of global IRQ events (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add Airoha EN7581 support (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Rely on reset_bulk APIs for PHY reset lines (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add mtk_gen3_pcie_pdata data structure (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Add support for Airoha EN7581 (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Drop excess mtk_pcie.mem kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI/ACPI: Increase Loongson max PCI hosts to 8 (Myron Stowe) [RHEL-67693]
  - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add suspend and resume support (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: Add T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add reset GPIO to struct j721e_pcie (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use dev_err_probe() in the probe() function (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Set cdns_pcie_host_init() global (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: ti,j721e-pci-host: Add ACSPCIE proxy control property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add i.MX8Q PCIe compatible string (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix error handling when IRQ request fails in probe (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Drop excess cdns_pcie_rc.dev kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Enable 7712 SoCs (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Change field name from 'type' to 'soc_base' (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Check return value of all reset_control_* calls (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Refactor for chips with many regular inbound windows (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Don't conflate the reset rescal with PHY ctrl (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Remove two unused constants from driver (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: PCI: brcmstb: Make HARD_DEBUG, INTR2_CPU_BASE offsets SoC-specific (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use swinit reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use bridge reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use common error handling code in brcm_pcie_probe() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Add 7712 SoC description (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Use maxItems for reset controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Change brcmstb maintainer and cleanup (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcmstb: compatible is required (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: Add compatible string for Brcmstb 74[23]5 MIPs SOCs (Myron Stowe) [RHEL-67693]
  - PCI: altera: Replace TLP_REQ_ID() with macro PCI_DEVID() (Myron Stowe) [RHEL-67693]
  - PCI: xilinx: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: tegra: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: rcar-host: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mobiveil: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: altera-msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - genirq/msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix enum pci_epc_bar_type kerneldoc (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add reg-name "dbi2" and "atu" for i.MX8M PCIe Endpoint (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: msi: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sc7280: Update bindings adding eight interrupts (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Change property 'fsl,pcie-scfg' type (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Add deprecated property 'num-viewport' (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with fsl,lx2160ar2-pcie (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: socionext,uniphier-pcie-ep: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: renesas,pci-rcar-gen2: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: hisilicon,kirin-pcie: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: host-generic-pci: Drop minItems and maxItems of ranges (Myron Stowe) [RHEL-67693]
  - s390/pci: Stop usurping pdev->dev.groups (Myron Stowe) [RHEL-67693]
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Myron Stowe) [RHEL-67693]
  - PCI: shpchp: Remove hpc_ops (Myron Stowe) [RHEL-67693]
  - drm/ast: Request PCI BAR with devres (Myron Stowe) [RHEL-67693]
  - PCI: Deprecate pcim_iomap_regions() in favor of pcim_iomap_region() (Myron Stowe) [RHEL-67693]
  - PCI: Make pcim_request_region() a public function (Myron Stowe) [RHEL-67693]
  - PCI: Rename CRS Completion Status to RRS (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Correct Configuration RRS checking (Myron Stowe) [RHEL-67693]
  - PCI/AER: Use PCI_DEVID() macro in aer_inject() (Myron Stowe) [RHEL-67693]
  - s390/pci: Drop unneeded reference to CONFIG_DMI (Myron Stowe) [RHEL-67693]
  - cpufreq/amd-pstate: Fix cpufreq_policy ref counting (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix max_perf updation with schedutil (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the goto label in amd_pstate_update_limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix per-policy boost flag incorrect when fail (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor max frequency calculation (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix prefcore rankings (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop boost_state variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set different default EPP policy for Epyc and Ryzen (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop ret variable from amd_pstate_set_energy_pref_index() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Always write EPP value when updating perf (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Cache EPP value and use that everywhere (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move limit updating code (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Change amd_pstate_update_perf() to return an int (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: store all values in cpudata struct in khz (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Only update the cached value in msr_set_epp() on success (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use FIELD_PREP and FIELD_GET macros (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop cached epp_policy variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: convert mutex use to guard() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Add trace event for EPP perf updates (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move the invocation of amd_pstate_update_perf() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Convert the amd_pstate_get/set_epp() to static calls (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use boost numerator for upper bound of frequencies (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Store the boost numerator as highest perf again (David Arcari) [RHEL-75923]
  - amd-pstate: Add missing documentation for `amd_pstate_prefcore_ranking` (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Add documentation for `amd_pstate_hw_prefcore` (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: update doc for Per CPU boost control method (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: add guided mode to the Operation mode (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: Fix section title underline (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce amd-pstate preferred core (David Arcari) [RHEL-75923]
  - Documentation: admin-guide: PM: Fix two typos (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: Update amd_pstate status sysfs for guided (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: disambiguate user space sections (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce new global sysfs attributes (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add amd pstate driver mode introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add EPP profiles introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: Add tbench and gitsource test introduction (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Detect preferred core support before driver registration (David Arcari) [RHEL-75923]
  - ACPI: processor: Move arch_init_invariance_cppc() call later (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move registration after static function call update (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Push adjust_perf vfunc init into cpu_init (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Do not attempt to clear MSR_AMD_CPPC_ENABLE (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename functions that enable CPPC (David Arcari) [RHEL-75923]
  - amd-pstate: Switch to amd-pstate by default on some Server platforms (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add fix for min freq unit test (David Arcari) [RHEL-75923]
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant amd_pstate_set_driver() call (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the switch case in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_set_driver() in amd_pstate_register_driver() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_register() in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set the initial min_freq to lowest_nonlinear_freq (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant verify() function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop needless EPP initialization (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use amd_pstate_update_min_max_limit() for EPP limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Don't update CPPC request in amd_pstate_cpu_boost_update() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename MSR and shared memory specific functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix non kerneldoc comment (David Arcari) [RHEL-75923]
  - x86/cpufeatures: Rename X86_FEATURE_FAST_CPPC to have AMD prefix (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use nominal perf for limits when boost is disabled (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Fix an "Uninitialized variables" issue (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add test case for mode switches (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Export symbols for changing modes (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Optimize amd_pstate_update_limits() (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Merge amd_pstate_highest_perf_set() into amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Detect preferred cores in amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() out of amd-pstate (David Arcari) [RHEL-75923]
  - x86/amd: Rename amd_get_highest_perf() to amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() from amd.c to cppc.c (David Arcari) [RHEL-75923]
  - MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (David Arcari) [RHEL-79669]
  - redhat: handle rename of intel_vsec.ko and intel_vsec_tpmi.ko (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: v1.21 release (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: Fix TRL restore after SST-TF disable (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Diamond Rapids support (David Arcari) [RHEL-79669]
  - platform/x86/intel/tpmi/plr: Make char[] longer to silence warning (David Arcari) [RHEL-79669]
  - platform/x86: intel: Add 'intel' prefix to the modules automatically (David Arcari) [RHEL-79669]
  - platform/x86/intel/Makefile: cleanup (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Clearwater Forest support (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Add Clearwater Forest to support list (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Use in_range() to check package ID validity (David Arcari) [RHEL-79669]
  - platform/x86/intel: pmt: Use y instead of objs in Makefile (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: Correct the typo 'ACCCESS_LOCAL' (David Arcari) [RHEL-79553]
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (David Arcari) [RHEL-79553]
  - platform/x86: intel/pmc: Fix ioremap() of bad address (David Arcari) [RHEL-79553]
  - x86/tsc: Move away from TSC leaf magic numbers (David Arcari) [RHEL-79553]
  - x86/cpu: Move TSC CPUID leaf definition (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (David Arcari) [RHEL-79553]
  - redhat: fix build/install targets in netfilter kselftest (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: make first pass deterministic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: add fib test case (Florian Westphal) [RHEL-21061]
  - selftests: add regression test for br_netfilter panic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: Avoid hanging ipvs.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_tproxy.sh: add tcp tests (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add test for br_netfilter+conntrack+queue combination (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: add test for disappearing listener (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: update makefiles and kernel config (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: place checktool helper in lib.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: move to net subdir (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: synproxy test requires nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add bridge conntrack + multicast test case (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: test for sctp collision processing in nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix libmnl pkg-config usage (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix a build error on openSUSE (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add synproxy test (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: reduce zone stress test running time (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: check ingress/egress chain too (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: monitor result file sizes (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: wait for specific nc pids (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: no need for ps -x option (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: use /proc for pid checking (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: rework test to detect offload failure (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add fib expression forward test case (Florian Westphal) [RHEL-21061]
  - selftests: nft_concat_range: add socat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: extend nfqueue tests to cover vrf device (Florian Westphal) [RHEL-21061]
  - thermal: Drop spaces before TABs (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_is_enabled() (David Arcari) [RHEL-61357]
  - thermal: core: Check passive delay in monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop dead code from monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant lockdep_assert_held() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Add sanity checks for trip temperature and hysteresis (David Arcari) [RHEL-61357]
  - thermal/of: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Fix rounding of delay jiffies (David Arcari) [RHEL-61357]
  - thermal: core: Drop tz field from struct thermal_instance (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant checks from thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Rename cdev-to-thermal-zone bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Clean up trip bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Drop unused bind/unbind functions and callbacks (David Arcari) [RHEL-61357]
  - mlxsw: core_thermal: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Unexport thermal_bind_cdev_to_trip() and thermal_unbind_cdev_from_trip() (David Arcari) [RHEL-61357]
  - thermal: ACPI: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Move thermal zone locking out of bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: sysfs: Use the dev argument in instance-related show/store (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant thermal instance checks (David Arcari) [RHEL-61357]
  - thermal: core: Rearrange checks in thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Fold two functions into their respective callers (David Arcari) [RHEL-61357]
  - thermal/core: Compute low and high boundaries in thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_zone_register() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_trips_init() error path (David Arcari) [RHEL-61357]
  - thermal: gov_bang_bang: Use governor_data to reduce overhead (David Arcari) [RHEL-61357]
  - thermal: helpers: Drop get_thermal_instance() (David Arcari) [RHEL-61357]
  - thermal: trip: Avoid skipping trips in thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Refine the handling of trip hysteresis changes (David Arcari) [RHEL-61357]
  - thermal: sysfs: Get to trips via attribute pointers (David Arcari) [RHEL-61357]
  - thermal: core: Store trip sysfs attributes in thermal_trip_desc (David Arcari) [RHEL-61357]
  - thermal: trip: Drop thermal_zone_get_trip() (David Arcari) [RHEL-61357]
  - thermal: qcom: Use thermal_zone_get_crit_temp() in qpnp_tm_init() (David Arcari) [RHEL-61357]
  - thermal: trip: Get rid of thermal_zone_get_num_trips() (David Arcari) [RHEL-61357]
  - thermal: tegra: Use thermal_zone_for_each_trip() for walking trip points (David Arcari) [RHEL-61357]
  - thermal: core: Back off when polling thermal zones on errors (David Arcari) [RHEL-61357]
  - thermal: trip: Split thermal_zone_device_set_mode() (David Arcari) [RHEL-61357]
  - thermal: core: Allow thermal zones to tell the core to ignore them (David Arcari) [RHEL-61357]
  - thermal: core: Add sanity checks for polling_delay and passive_delay (David Arcari) [RHEL-61357]
  - thermal: core: Fix list sorting in __thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: core: Change passive_delay and polling_delay data type (David Arcari) [RHEL-61357]
  - thermal: core: constify 'type' in devm_thermal_of_cooling_device_register() (David Arcari) [RHEL-61357]
  - thermal: trip: Fold __thermal_zone_get_trip() into its caller (David Arcari) [RHEL-61357]
  - thermal: core: Call monitor_thermal_zone() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Go straight to instance->lower when mitigation is over (David Arcari) [RHEL-61357]
  - thermal: core: Change PM notifier priority to the minimum (David Arcari) [RHEL-61357]
  - thermal: core: Synchronize suspend-prepare and post-suspend actions (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Restore passive polling management (David Arcari) [RHEL-61357]
  - thermal: ACPI: Invalidate trip points with temperature of 0 or below (David Arcari) [RHEL-61357]
  - thermal: core: Do not fail cdev registration because of invalid initial state (David Arcari) [RHEL-61357]
  - thermal: core: Avoid calling .trip_crossed() for critical and hot trips (David Arcari) [RHEL-61357]
  - thermal: trip: Use READ_ONCE() for lockless access to trip properties (David Arcari) [RHEL-61357]
  - thermal: trip: Make thermal_zone_set_trips() use trip thresholds (David Arcari) [RHEL-61357]
  - thermal: trip: Rename __thermal_zone_set_trips() to thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: trip: Use common set of trip type names (David Arcari) [RHEL-61357]
  - thermal/debugfs: Move some statements from under thermal_dbg->lock (David Arcari) [RHEL-61357]
  - thermal/debugfs: Compute maximum temperature for mitigation episode as a whole (David Arcari) [RHEL-61357]
  - thermal/debugfs: Adjust check for trips without statistics in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix up units in "mitigations" files (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print mitigation timestamp value in milliseconds (David Arcari) [RHEL-61357]
  - thermal/debugfs: Do not extend mitigation episodes beyond system resume (David Arcari) [RHEL-61357]
  - thermal/debugfs: Use helper to update trip point overstepping duration (David Arcari) [RHEL-61357]
  - thermal: trip: Trigger trip down notifications when trips involved in mitigation become invalid (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Allow tze_seq_show() to print statistics for invalid trips (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print initial trip temperature and hysteresis in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal: core: Fix the handling of invalid trip points (David Arcari) [RHEL-61357]
  - thermal: core: Move passive polling management to the core (David Arcari) [RHEL-61357]
  - thermal: core: Do not call handle_thermal_trip() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: trip: Add missing empty code line (David Arcari) [RHEL-61357]
  - thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Create records for cdev states as they get used (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid printing zero duration for mitigation events in progress (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_governor_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Make tze_seq_show() skip invalid trips and trips with no stats (David Arcari) [RHEL-61357]
  - thermal/debugfs: Rename thermal_debug_update_temp() to thermal_debug_update_trip_stats() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Clean up thermal_debug_update_temp() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid excessive updates of trip point statistics (David Arcari) [RHEL-61357]
  - thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (David Arcari) [RHEL-61357]
  - thermal: core: Relocate critical and hot trip handling (David Arcari) [RHEL-61357]
  - thermal: core: Drop the .throttle() governor callback (David Arcari) [RHEL-61357]
  - thermal: gov_user_space: Use .trip_crossed() instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Eliminate unnecessary integer divisions (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Clean up thermal_zone_trip_update() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .manage() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .trip_crossed() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Relocate the struct thermal_governor definition (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify checks related to passive trips (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify get_target_state() (David Arcari) [RHEL-61357]
  - thermal: core: Sort trip point crossing notifications by temperature (David Arcari) [RHEL-61357]
  - thermal: core: Send trip crossing notifications at init time if needed (David Arcari) [RHEL-61357]
  - thermal: core: Rewrite comments in handle_thermal_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Make struct thermal_zone_device definition internal (David Arcari) [RHEL-61357]
  - thermal: core: Move threshold out of struct thermal_trip (David Arcari) [RHEL-61357]
  - thermal: netlink: Rename thermal_gnl_family (David Arcari) [RHEL-61357]
  - thermal/of: Assume polling-delay(-passive) 0 when absent (David Arcari) [RHEL-61357]
  - thermal: core: Eliminate writable trip points masks (David Arcari) [RHEL-61357]
  - thermal: of: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: ACPI: Discard trips table after zone registration (David Arcari) [RHEL-61357]
  - thermal: ACPI: Constify acpi_thermal_zone_ops (David Arcari) [RHEL-61357]
  - wifi: iwlwifi: mvm: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: core: Change governor name to const char pointer (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Fix dependency on trip points ordering (David Arcari) [RHEL-61357]
  - thermal/hwmon: Add error information printing for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Fold update_passive_instance() into its caller (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Rearrange get_trip_level() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_register() (David Arcari) [RHEL-61357]
  - thermal: Allow selecting the bang-bang governor as default (David Arcari) [RHEL-61357]
  - thermal: helpers: Use for_each_trip() in __thermal_zone_get_temp() (David Arcari) [RHEL-61357]
  - thermal: trip: Drop redundant __thermal_zone_get_trip() header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the thermal_core.h header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the right device for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in hwmon located drivers (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar: Use generic thermal_zone_get_trip() function (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar_thermal: Constify static thermal_zone_device_ops (David Arcari) [RHEL-61357]
  - thermal: hisi: Use thermal_zone_for_each_trip() in hisi_thermal_register_sensor() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers [partial] (David Arcari) [RHEL-61357]
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Jon Maloy) [RHEL-67470] {CVE-2024-53114}
  - powerpc/xics: fix refcount leak in icp_opal_init() (Mamatha Inamdar) [RHEL-80861] {CVE-2022-49432}
  - powerpc/papr_scm: don't requests stats with '0' sized stats buffer (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/papr_scm: Fix leaking nvdimm_events_map elements (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/xive: Fix refcount leak in xive_spapr_init (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()' (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - zram: fix potential UAF of zram table (Ming Lei) [RHEL-77216] {CVE-2025-21671}
  - zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77216]
  - block: fix uaf for flush rq while iterating tags (Ming Lei) [RHEL-75854] {CVE-2024-53170}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Ming Lei) [RHEL-75869] {CVE-2024-56672}
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Ming Lei) [RHEL-77310] {CVE-2025-21631}
  - bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-75544]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-77915] {CVE-2024-53680}
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-77891] {CVE-2025-21648}
  - rxrpc: Fix a race between socket set up and I/O thread creation (Marc Dionne) [RHEL-63629] {CVE-2024-49864}
  - afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-77202] {CVE-2025-21672}
  - afs: Fix lock recursion (Marc Dionne) [RHEL-68562] {CVE-2024-53090}
  - rxrpc: Fix missing locking causing hanging calls (Marc Dionne) [RHEL-67999] {CVE-2024-50294}
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-73706]
  - redhat: bump RHEL_MINOR for 9.7 (Augusto Caringi)
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-62750]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-62750]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-62750]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-62750]
  - powerpc/pseries/dlpar: Add device tree nodes for DLPAR IO add (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries/dlpar: Remove device tree node for DLPAR IO remove (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (Mamatha Inamdar) [RHEL-77266]
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity (Mamatha Inamdar) [RHEL-73626]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-72325] {CVE-2024-56603}
  - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-72261] {CVE-2024-56645}
  - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-72057] {CVE-2023-52922}
  - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79811]
  - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79813]
  - s390/pai: export number of sysfs attribute files (Mete Durlu) [RHEL-79808]
  - s390/pai: fix attr_event_free upper limit for pai device drivers (Mete Durlu) [RHEL-79808]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-78507]
  - s390/topology: Improve topology detection (Mete Durlu) [RHEL-76350]
  - ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-63642]
  - ice: init flow director before RDMA (Petr Oros) [RHEL-63642]
  - ice: simplify VF MSI-X managing (Petr Oros) [RHEL-63642]
  - ice: enable_rdma devlink param (Petr Oros) [RHEL-63642]
  - ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-63642]
  - ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-63642]
  - ice: get rid of num_lan_msix field (Petr Oros) [RHEL-63642]
  - ice: remove splitting MSI-X between features (Petr Oros) [RHEL-63642]
  - ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-63642]
  - ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-63642]
  - ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-63642]
  - ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-63642]
  - ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-63642]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-572.el9]
changelog:
  - sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute overloaded status unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute NUMA Balancing stats unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched, psi: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/debug: Change need_resched warnings to pr_err (Phil Auld) [RHEL-78821]
  - sched: Fix race between yield_to() and try_to_wake_up() (Phil Auld) [RHEL-78821]
  - topology: Keep the cpumask unchanged when printing cpumap (Phil Auld) [RHEL-78821]
  - sched/fair: Update comments after sched_tick() rename. (Phil Auld) [RHEL-78821]
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Phil Auld) [RHEL-78821]
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-78821]
  - sched: deadline: Cleanup goto label in pick_earliest_pushable_dl_task (Phil Auld) [RHEL-78821]
  - sched/fair: Mark m*_vruntime() with __maybe_unused (Phil Auld) [RHEL-78821]
  - sched: Unify HK_TYPE_{TIMER|TICK|MISC} to HK_TYPE_KERNEL_NOISE (Phil Auld) [RHEL-78821]
  - sched/isolation: Consolidate housekeeping cpumasks that are always identical (Phil Auld) [RHEL-78821]
  - sched/isolation: Make "isolcpus=nohz" equivalent to "nohz_full" (Phil Auld) [RHEL-78821]
  - sched/core: Remove HK_TYPE_SCHED (Phil Auld) [RHEL-78821]
  - sched/deadline: Consolidate Timer Cancellation (Phil Auld) [RHEL-78821]
  - sched/fair: Remove CONFIG_CFS_BANDWIDTH=n definition of cfs_bandwidth_used() (Phil Auld) [RHEL-78821]
  - sched: Don't try to catch up excess steal time. (Phil Auld) [RHEL-78821]
  - sched: add READ_ONCE to task_on_rq_queued (Phil Auld) [RHEL-78821]
  - sched/cpufreq: Ensure sd is rebuilt for EAS check (Phil Auld) [RHEL-78821]
  - sched: Initialize idle tasks only once (Phil Auld) [RHEL-78821]
  - sched/uclamp: Fix unnused variable warning (Phil Auld) [RHEL-78821]
  - sched_getattr: port to copy_struct_to_user (Phil Auld) [RHEL-78821]
  - uaccess: add copy_struct_to_user helper (Phil Auld) [RHEL-78821]
  - sched: Consolidate pick_*_task to task_is_pushable helper (Phil Auld) [RHEL-78821]
  - sched: Add move_queued_task_locked helper (Phil Auld) [RHEL-78821]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Phil Auld) [RHEL-78821]
  - sched/wait: Remove unused bit_wait_io_timeout (Phil Auld) [RHEL-78821]
  - sched/deadline: Fix schedstats vs deadline servers (Phil Auld) [RHEL-78821]
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Phil Auld) [RHEL-78821]
  - sched/deadline: Comment sched_dl_entity::dl_server variable (Phil Auld) [RHEL-78821]
  - sched/core: Add clearing of ->dl_server in put_prev_task_balance() (Phil Auld) [RHEL-78821]
  - sched/core: Clear prev->dl_server in CFS pick fast path (Phil Auld) [RHEL-78821]
  - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy (Phil Auld) [RHEL-78821]
  - sched: remove HZ_BW feature hedge (Phil Auld) [RHEL-78821]
  - lib: bitmap: fix many kernel-doc warnings (Phil Auld) [RHEL-78821]
  - docs/scheduler: fix typo and warning in sched-bwc (Phil Auld) [RHEL-78821]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81666] {CVE-2025-21785}
  - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Charles Mirabile) [RHEL-62922]
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix irq_complete_ack() comment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Rely on genpool alignment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4.1: Replace bare number with ID_AA64PFR0_EL1_GIC_V4P1 (Charles Mirabile) [RHEL-62922]
  - irqchip: Remove asmlinkage for handlers registered with set_handle_irq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Pass #redistributor-regions to gic_of_setup_kvm_info() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Fix ordering between vmapp and vpe locks (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Always configure affinity on VPE activation (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes ACPI probing (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix 'broken_rdists' unused warning when !SMP and !ACPI (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Add support for ACPI's disabled but 'online capable' CPUs (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add GICC online capable bit handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Don't return errors from gic_acpi_match_gicc() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Work around insecure GIC integrations (Charles Mirabile) [RHEL-62922]
  - arm64: irqchip/gic-v3: Select priorities at boot time (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Init SRE before poking sysregs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Detect GICD_CTRL.DS and SCR_EL3.FIQ earlier (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make distributor priorities variables (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-common: Remove sync_access callback (Charles Mirabile) [RHEL-62922]
  - wordpart.h: Add REPEAT_BYTE_U32() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove usage of the deprecated ida_simple_xx() API (Charles Mirabile) [RHEL-62922]
  - irqchip/gic(v3): Replace gic_irq() with irqd_to_hwirq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Use readl_relaxed_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Do not use timekeeping in read_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Call cpu_relax() in busy loops (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make gic_irq_domain_select() robust for zero parameter count (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Do not assume vPE tables are preallocated (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Flush ITS tables correctly in non-coherent GIC designs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Handle non-coherent GICv4 redistributors (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes DT probing (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't override quirk settings with default values (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Split allocation from initialisation of its_node (Charles Mirabile) [RHEL-62922]
  - block: Add common atomic writes enable flag (Nigel Croxon) [RHEL-73514]
  - block: Ensure start sector is aligned for stacking atomic writes (Nigel Croxon) [RHEL-73514]
  - block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73514]
  - md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73514]
  - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73514]
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73514]
  - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73514]
  - md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73514]
  - md/raid10: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid1: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid0: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73514]
  - md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73514]
  - md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73514]
  - md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73514]
  - md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73514]
  - md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73514]
  - md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73514]
  - md: ensure child flush IO does not affect origin bio->bi_status (Nigel Croxon) [RHEL-73514]
  - mm/mm_init: use node's number of cpus in deferred_page_init_max_threads (Eric Chanudet) [RHEL-77271]
  - selftests/net: convert test_vxlan_mdb.sh to run it in unique namespace (CKI Backport Bot) [RHEL-77173]
  - powerpc/xive/spapr: correct bitmap allocation size (Mamatha Inamdar) [RHEL-80803] {CVE-2022-49623}
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-80098]
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (Maxim Levitsky) [RHEL-80098]
  - net: mana: use ethtool string helpers (Maxim Levitsky) [RHEL-80098]
  - net: mana: Enable debugfs files for MANA device (Maxim Levitsky) [RHEL-80098]
  - net: mana: Add get_link and get_link_ksettings in ethtool (Maxim Levitsky) [RHEL-80098]
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (Maxim Levitsky) [RHEL-80098]
  - net: mana: Improve mana_set_channels() in low mem conditions (Maxim Levitsky) [RHEL-80098]
  - net: mana: Implement get_ringparam/set_ringparam for mana (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-80098]
  - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81935]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81935]
  - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81935]
  - io_uring: check if iowq is killed before queuing (Jeff Moyer) [RHEL-72430] {CVE-2024-56709}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jeff Moyer) [RHEL-68164] {CVE-2024-53052}
  - io_uring: check if we need to reschedule during overflow flush (Jeff Moyer) [RHEL-63824] {CVE-2024-50060}
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-78983] {CVE-2024-56690}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (CKI Backport Bot) [RHEL-58876] {CVE-2024-46689}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-573.el9]
changelog:
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
  - Revert "mm: add vma_has_recency()" (Luiz Capitulino) [RHEL-80655]
  - Revert "mm: support POSIX_FADV_NOREUSE" (Luiz Capitulino) [RHEL-80655]
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80628]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80527 RHEL-78507]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21980] {CVE-2024-57807}
  - scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77122]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79112] {CVE-2025-21694}
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-49958 RHEL-6641 RHEL-77115]
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78974] {CVE-2025-1272}
  - redhat/self-test: Remove --all from git query (Prarit Bhargava)
  - redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71914]
  - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-74219]
  - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-74219]
  - powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-74219]
  - powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-74219]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-75514]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-9309]
  - gitlab-ci: add jobs for rhel9 automotive pipelines (Michael Hofmann)
  - gitlab-ci: clean up trigger job naming and template inheritance (Michael Hofmann)
  - can: bcm: Fix UAF in bcm_proc_show() (Michal Schmidt) [RHEL-80748] {CVE-2023-52922}
  - Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-75512]
  - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-68688]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78429]
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-75864] {CVE-2024-56631}
  - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (Aristeu Rozanski) [RHEL-22695]
  - ACPI: PRM: Add PRM handler direct call support (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Clean up white space and add __init annotation (Aristeu Rozanski) [RHEL-22695]
  - acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Don't duplicate setup/teardown code (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrapper: Move workqueue manipulation out of line (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Use type safe encapsulation of call arguments (Aristeu Rozanski) [RHEL-22695]
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-82537]
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (CKI Backport Bot) [RHEL-83546]
  - pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (David Arcari) [RHEL-80660]
  - pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (David Arcari) [RHEL-80660]
  - pm: cpupower: Add install and uninstall options to bindings makefile (David Arcari) [RHEL-80660]
  - cpupower: Adjust whitespace for amd-pstate specific prints (David Arcari) [RHEL-80660]
  - cpupower: Don't fetch maximum latency when EPP is enabled (David Arcari) [RHEL-80660]
  - cpupower: Add support for showing energy performance preference (David Arcari) [RHEL-80660]
  - cpupower: Don't try to read frequency from hardware when kernel uses aperfmperf (David Arcari) [RHEL-80660]
  - cpupower: Add support for amd-pstate preferred core rankings (David Arcari) [RHEL-80660]
  - cpupower: Add support for parsing 'enabled' or 'disabled' strings from table (David Arcari) [RHEL-80660]
  - cpupower: Remove spurious return statement (David Arcari) [RHEL-80660]
  - cpupower: fix TSC MHz calculation (David Arcari) [RHEL-80660]
  - cpupower: revise is_valid flag handling for idle_monitor (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Fix cross compilation (David Arcari) [RHEL-80660]
  - cpupower: add checks for xgettext and msgfmt (David Arcari) [RHEL-80660]
  - cpupower: Add Chinese Simplified translation (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Add test to confirm cpu state is disabled (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Improve disable c_state block (David Arcari) [RHEL-80660]
  - pm: cpupower: gitignore: Add compile_commands.json (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Allow overriding cross-compiling env params (David Arcari) [RHEL-80660]
  - pm: cpupower: bench: print config file path when open cpufreq-bench.conf fails (David Arcari) [RHEL-80660]
  - tools/power/cpupower: Add documentation for some recently introduced options (David Arcari) [RHEL-80660]
  - pm: cpupower: Clean up bindings gitignore (David Arcari) [RHEL-80660]
  - pm: cpupower: rename raw_pylibcpupower.i (David Arcari) [RHEL-80660]
  - pm:cpupower: Add error warning when SWIG is not installed (David Arcari) [RHEL-80660]
  - pm:cpupower: Include test_raw_pylibcpupower.py (David Arcari) [RHEL-80660]
  - pm:cpupower: Add SWIG bindings files for libcpupower (David Arcari) [RHEL-80660]
  - pm:cpupower: Add missing powercap_set_enabled() stub function (David Arcari) [RHEL-80660]
  - cpupower: fix lib default installation path (David Arcari) [RHEL-80660]
  - cpupower: Disable direct build of the 'bench' subproject (David Arcari) [RHEL-80660]
  - cpupower: Remove absent 'v' parameter from monitor man page (David Arcari) [RHEL-80660]
  - cpupower: Improve cpupower build process description (David Arcari) [RHEL-80660]
  - cpupower: Add 'help' target to the main Makefile (David Arcari) [RHEL-80660]
  - cpupower: Replace a dead reference link with working ones (David Arcari) [RHEL-80660]
  - Fix cpupower-frequency-info.1 man page typo (David Arcari) [RHEL-80660]
  - tools cpupower bench: Override CFLAGS assignments (David Arcari) [RHEL-80660]
  - cpupower: fix reference to nonexistent document (David Arcari) [RHEL-80660]
  - EDAC/amd64: Simplify ECC check on unified memory controllers (Aristeu Rozanski) [RHEL-73049]
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47438]
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47438]
  - can: isotp: fix support for transmission of SF without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-80832]
  - can: isotp: restore accidentally removed MSG_PEEK feature (Radu Rendec) [RHEL-80832]
  - can: isotp: fix race between isotp_sendsmg() and isotp_release() (Radu Rendec) [RHEL-80832]
  - can: isotp: handle wait_event_interruptible() return values (Radu Rendec) [RHEL-80832]
  - can: isotp: split tx timer into transmission and timeout (Radu Rendec) [RHEL-80832]
  - can: isotp: fix potential CAN frame reception race in isotp_rcv() (Radu Rendec) [RHEL-80832]
  - can: isotp: fix tx state handling for echo tx processing (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): do not validate unused address information (Radu Rendec) [RHEL-80832]
  - can: isotp: add support for transmission without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: remove re-binding of bound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: stop timeout monitoring when no first frame was sent (Radu Rendec) [RHEL-80832]
  - can: isotp: support MSG_TRUNC flag when reading from socket (Radu Rendec) [RHEL-80832]
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (Radu Rendec) [RHEL-80832]
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Radu Rendec) [RHEL-80832] {CVE-2022-49269}
  - can: isotp: set max PDU size to 64 kByte (Radu Rendec) [RHEL-80832]
  - can: isotp: set default value for N_As to 50 micro seconds (Radu Rendec) [RHEL-80832]
  - can: isotp: add local echo tx processing for consecutive frames (Radu Rendec) [RHEL-80832]
  - selftests: livepatch: test livepatching a kprobed function (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: save and restore kprobe state (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: rename KLP_SYSFS_DIR to SYSFS_KLP_DIR (Denis Aleksandrov) [RHEL-80215]
  - Documentation: livepatch: Correct release locks antonym (Denis Aleksandrov) [RHEL-80215]
  - EDAC/mce_amd: Add support for FRU text in MCA (Aristeu Rozanski) [RHEL-52657]
  - x86/mce/apei: Handle variable SMCA BERT record size (Aristeu Rozanski) [RHEL-52657]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Aristeu Rozanski) [RHEL-52657]
  - tracing: Add __print_dynamic_array() helper (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Rename mce_setup() to mce_prep_record() (Aristeu Rozanski) [RHEL-52657]
  - workqueue: Put the pwq after detaching the rescuer from the pool (CKI Backport Bot) [RHEL-81472] {CVE-2025-21786}
  - EDAC/{i10nm,skx,skx_common}: Support UV systems (Aristeu Rozanski) [RHEL-73892]
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/asm: Make serialize() always_inline (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: fix 32-bit build (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: Avoid relocatable quantities in Xen ELF notes (Vitaly Kuznetsov) [RHEL-70669]
  - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Tomas Glozar) [RHEL-81911]
  - Documentation/sysctl: Add timer_migration to kernel.rst (Phil Auld) [RHEL-11707]
  - netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal) [RHEL-80104]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-574.el9]
changelog:
  - ima: Fix a potential integer overflow in ima_appraise_measurement (CKI Backport Bot) [RHEL-80802] {CVE-2022-49643}
  - selftests/mm: hugetlb_fault_after_madv: improve test output (David Hildenbrand) [RHEL-60023]
  - selftests/mm: hugetlb_fault_after_madv: use default hugetlb page size (David Hildenbrand) [RHEL-60023]
  - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CKI Backport Bot) [RHEL-81375] {CVE-2024-57988}
  - list: fix a data-race around ep->rdllist (Jan Stancek) [RHEL-80985] {CVE-2022-49443}
  - Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CKI Backport Bot) [RHEL-81268] {CVE-2024-57987}
  - RDMA/nldev: Set error code in rdma_nl_notify_event (Kamal Heib) [RHEL-77880]
  - RDMA/core: Fix ENODEV error for iWARP test over vlan (Kamal Heib) [RHEL-77880]
  - IB/cm: Rework sending DREQ when destroying a cm_id (Kamal Heib) [RHEL-77880]
  - IB/cm: Do not hold reference on cm_id unless needed (Kamal Heib) [RHEL-77880]
  - IB/cm: Explicitly mark if a response MAD is a retransmission (Kamal Heib) [RHEL-77880]
  - RDMA/nldev: Add IB device and net device rename events (Kamal Heib) [RHEL-77880]
  - RDMA/core: Move ib_uverbs_file struct to uverbs_types.h (Kamal Heib) [RHEL-77880]
  - RDMA/core: Add device ufile cleanup operation (Kamal Heib) [RHEL-77880]
  - RDMA: Use ethtool string helpers (Kamal Heib) [RHEL-77880]
  - RDMA/ipoib: Use the networking stack default for txqueuelen (Kamal Heib) [RHEL-77880]
  - RDMA/srpt: Make slab cache names unique (Kamal Heib) [RHEL-77880]
  - efi: Add iMac Pro 2017 to uefi skip cert quirk (Coiby Xu) [RHEL-80989]
  - efi: Correct Macmini DMI match in uefi cert quirk (Coiby Xu) [RHEL-80989]
  - efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CKI Backport Bot) [RHEL-80989] {CVE-2022-49357}
  - NFSD: fix hang in nfsd4_shutdown_callback (Olga Kornievskaia) [RHEL-81291] {CVE-2025-21795}
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CKI Backport Bot) [RHEL-81439] {CVE-2024-58012}
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length (CKI Backport Bot) [RHEL-82489] {CVE-2025-21826}
  - usbnet: fix memory leak in error case (CKI Backport Bot) [RHEL-80848] {CVE-2022-49657}
  - crypto: tegra - do not transfer req when tegra init fails (CKI Backport Bot) [RHEL-82476] {CVE-2024-58075}
  - RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Validate address map when information is gathered (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Expand helpers for adding and removing base and hole (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Read DRAM hole base early (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (Aristeu Rozanski) [RHEL-22697]
  - configs: enable IVPU driver on RHEL (Karol Herbst) [RHEL-38583]
  - accel: add build system changes (Karol Herbst) [RHEL-38583]
  - accel: backport ivpu driver from v6.12 (Karol Herbst) [RHEL-38583]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-575.el9]
changelog:
  - PCI/bwctrl: Fix NULL pointer deref on unbind and bind (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Enable only if more than one speed is supported (Myron Stowe) [RHEL-81906]
  - PCI: Honor Max Link Speed when determining supported speeds (Myron Stowe) [RHEL-81906]
  - PCI: Drop duplicate pcie_get_speed_cap(), pcie_get_width_cap() declarations (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Add pcie_set_target_speed() to set PCIe Link Speed (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller (Myron Stowe) [RHEL-81906]
  - PCI: Abstract LBMS seen check into pcie_lbms_seen() (Myron Stowe) [RHEL-81906]
  - PCI: Refactor pcie_update_link_speed() (Myron Stowe) [RHEL-81906]
  - PCI: Store all PCIe Supported Link Speeds (Myron Stowe) [RHEL-81906]
  - PCI: Protect Link Control 2 Register with RMW locking (Myron Stowe) [RHEL-81906]
  - Documentation PCI: Reformat RMW ops documentation (Myron Stowe) [RHEL-81906]
  - thermal/of: Fix cdev lookup in thermal_of_should_bind() (David Arcari) [RHEL-79821]
  - thermal: of: Simplify thermal_of_should_bind with scoped for each OF child (David Arcari) [RHEL-79821]
  - thermal: intel: Fix compile issue when CONFIG_NET is not defined (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: Panther Lake power floor and workload hint support (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: Panther Lake DLVR support (David Arcari) [RHEL-79821]
  - thermal: intel: Remove explicit user_space governor selection (David Arcari) [RHEL-79821]
  - ACPI: DPTF: Support Panther Lake (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Enable MMIO RAPL for Panther Lake (David Arcari) [RHEL-79821]
  - thermal: int3400: Remove unneeded data_vault attribute_group (David Arcari) [RHEL-79821]
  - thermal: int3400: Fix reading of current_uuid for active policy (David Arcari) [RHEL-79821]
  - x86/cpu: Fix FAM5_QUARK_X1000 to use X86_MATCH_VFM() (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support (David Arcari) [RHEL-79821]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-79821]
  - thermal: intel: intel_tcc_cooling: Switch to new Intel CPU model defines (David Arcari) [RHEL-79821]
  - thermal: intel: intel_pch: Improve cooling log (David Arcari) [RHEL-79821]
  - x86/cpu/topology: Remove topology_max_die_per_package() (David Arcari) [RHEL-79821]
  - x86/cpu/topology: Rename topology_max_die_per_package() [partial] (David Arcari) [RHEL-79821]
  - arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Mamatha Inamdar) [RHEL-80602]
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Mamatha Inamdar) [RHEL-80602]
  - certs: Add ECDSA signature verification self-test (Herbert Xu) [RHEL-81929]
  - certs: Move RSA self-test data to separate file (Herbert Xu) [RHEL-81929]
  - certs: Break circular dependency when selftest is modular (Herbert Xu) [RHEL-81929]
  - KEYS: Include linux/errno.h in linux/verification.h (Herbert Xu) [RHEL-81929]
  - crypto: certs: fix FIPS selftest dependency (Herbert Xu) [RHEL-81929]
  - certs: Add support for using elliptic curve keys for signing modules (Herbert Xu) [RHEL-81929]
  - certs: Trigger creation of RSA module signing key if it's not an RSA key (Herbert Xu) [RHEL-81929]
  - dpll: add clock quality level attribute and op (Petr Oros) [RHEL-77838]
  - tpm: Change to kvalloc() in eventlog/acpi.c (CKI Backport Bot) [RHEL-81489] {CVE-2024-58005}
  - selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini) [RHEL-74363]
  - vrf: use RCU protection in l3mdev_l3_out() (Guillaume Nault) [RHEL-81542] {CVE-2025-21791}
  - smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83858]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-576.el9]
changelog:
  - md/raid1: fix memory leak in raid1_run() if no active rdev (Nigel Croxon) [RHEL-83988]
  - md/raid1: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
  - md/raid0: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
  - md: switch personalities faulty multipath to use md_submodule_head (Nigel Croxon) [RHEL-83988]
  - async_xor: Remove unused 'async_xor_val' (Nigel Croxon) [RHEL-83988]
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Nigel Croxon) [RHEL-83988]
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Nigel Croxon) [RHEL-83988]
  - md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83988]
  - md/raid5: merge reshape_progress checking inside get_reshape_loc() (Nigel Croxon) [RHEL-83988]
  - md: fix mddev uaf while iterating all_mddevs list (Nigel Croxon) [RHEL-83988]
  - md: switch md-cluster to use md_submodle_head (Nigel Croxon) [RHEL-83988]
  - md: switch personalities to use md_submodule_head (Nigel Croxon) [RHEL-83988]
  - md: don't export md_cluster_ops (Nigel Croxon) [RHEL-83988]
  - md/md-cluster: cleanup md_cluster_ops reference (Nigel Croxon) [RHEL-83988]
  - md: introduce struct md_submodule_head and APIs (Nigel Croxon) [RHEL-83988]
  - md: only include md-cluster.h if necessary (Nigel Croxon) [RHEL-83988]
  - md: merge common code into find_pers() (Nigel Croxon) [RHEL-83988]
  - md: ensure resync is prioritized over recovery (Nigel Croxon) [RHEL-83988]
  - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-83988]
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-83988]
  - md: reintroduce md-linear (Nigel Croxon) [RHEL-83988]
  - md: Remove deprecated CONFIG_MD_LINEAR (Nigel Croxon) [RHEL-83988]
  - md/linear: Get rid of md-linear.h (Nigel Croxon) [RHEL-83988]
  - md/md-linear: Annotate struct linear_conf with __counted_by (Nigel Croxon) [RHEL-83988]
  - Revert "Upstream has changed the APIs to suspend the array." (Nigel Croxon) [RHEL-83988]
  - Revert "md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add()" (Nigel Croxon) [RHEL-83988]
  - bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (CKI Backport Bot) [RHEL-82439]
  - tools/power turbostat: version 2025.02.02 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add CPU%c1e BIC for CWF (David Arcari) [RHEL-84464]
  - tools/power turbostat: Harden one-shot mode against cpu offline (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix forked child affinity regression (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add tcore clock PMT type (David Arcari) [RHEL-84464]
  - tools/power turbostat: version 2025.01.14 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow adding PMT counters directly by sysfs path (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow mapping multiple PMT files with the same GUID (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add PMT directory iterator helper (David Arcari) [RHEL-84464]
  - tools/power turbostat: Extend PMT identification with a sequence number (David Arcari) [RHEL-84464]
  - tools/power turbostat: Return default value for unmapped PMT domains (David Arcari) [RHEL-84464]
  - tools/power turbostat: Check for non-zero value when MSR probing (David Arcari) [RHEL-84464]
  - tools/power turbostat: Enhance turbostat self-performance visibility (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add fixed RAPL PSYS divisor for SPR (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix PMT mmaped file size rounding (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove SysWatt from DISABLED_BY_DEFAULT (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add an NMI column (David Arcari) [RHEL-84464]
  - tools/power turbostat: add Busy% to "show idle" (David Arcari) [RHEL-84464]
  - tools/power turbostat: Introduce --force parameter (David Arcari) [RHEL-84464]
  - tools/power turbostat: Improve --help output (David Arcari) [RHEL-84464]
  - tools/power turbostat: Exit on unsupported Vendors (David Arcari) [RHEL-84464]
  - tools/power turbostat: Exit on unsupported Intel models (David Arcari) [RHEL-84464]
  - tools/power turbostat: update turbostat(8) (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add initial support for ClearwaterForest (David Arcari) [RHEL-45097 RHEL-84464]
  - tools/power turbostat: Add initial support for PantherLake (David Arcari) [RHEL-47460 RHEL-84464]
  - tools/power turbostat: 2024.11.30 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add RAPL psys as a built-in counter (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix child's argument forwarding (David Arcari) [RHEL-84464]
  - tools/power turbostat: Force --no-perf in --dump mode (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add support for /sys/class/drm/card1 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Cache graphics sysfs file descriptors during probe (David Arcari) [RHEL-84464]
  - tools/power turbostat: Consolidate graphics sysfs access (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove unnecessary fflush() call (David Arcari) [RHEL-84464]
  - tools/power turbostat: Enhance platform divergence description (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove PC3 support on Lunarlake (David Arcari) [RHEL-84464]
  - tools/power turbostat: Rename arl_features to lnl_features (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add back PC8 support on Arrowlake (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove PC7/PC9 support on MTL (David Arcari) [RHEL-84464]
  - tools/power turbostat: Honor --show CPU, even when even when num_cpus=1 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix trailing '\n' parsing (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow using cpu device in perf counters on hybrid platforms (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix column printing for PMT xtal_time counters (David Arcari) [RHEL-84464]
  - tools/power turbostat: fix GCC9 build regression (David Arcari) [RHEL-84464]
  - cgroup: Remove steal time from usage_usec (Waiman Long) [RHEL-79933]
  - KVM: selftests: Allow running a single iteration of dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Fix an off-by-one in the number of dirty_log_test iterations (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Set per-iteration variables at the start of each iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Tighten checks around prev iter's last dirty page in ring (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Ensure guest writes min number of pages in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: sefltests: Verify value of dirty_log_test last page isn't bogus (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Collect *all* dirty entries in each dirty_log_test iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Print (previous) last_page on dirty page value mismatch (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Use continue to handle all "pass" scenarios in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Post to sem_vcpu_stop if and only if vcpu_stop is true (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Keep dirty_log_test vCPU in guest until it needs to stop (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Honor "stop" request in dirty ring test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Limit dirty_log_test's s390x workaround to s390x (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Continuously reap dirty ring while vCPU is running (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Read per-page value into local var when verifying dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Precisely track number of dirty/clear pages for each iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Drop stale srandom() initialization from dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Drop signal/kick from dirty ring testcase (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Sync dirty_log_test iteration to guest *before* resuming (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Support multiple write retires in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Add vcpu_arch_put_guest() to do writes from guest code (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Provide a global pseudo-RNG instance for all tests (Maxim Levitsky) [RHEL-67879]
  - KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-67879]
  - KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-67879]
  - arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl) [RHEL-71452]
  - selftests/bpf: Add tests for bpf_get_dentry_xattr (Gregory Bell) [RHEL-33903]
  - bpf: Add kfunc bpf_get_dentry_xattr() to read xattr from dentry (Gregory Bell) [RHEL-33903]
  - bpf: Move bpf_get_file_xattr to fs/bpf_fs_kfuncs.c (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Attempt to build BPF programs with -Wsign-compare (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Fixes tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Fix spelling mistake "get_signaure_size" -> "get_signature_size" (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Add test that uses fsverity and xattr to sign a file (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Add tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Sort config in alphabetic order (Gregory Bell) [RHEL-33903]
  - Documentation/bpf: Add documentation for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - bpf, fsverity: Add kfunc bpf_get_fsverity_digest (Gregory Bell) [RHEL-33903]
  - bpf: Add kfunc bpf_get_file_xattr (Gregory Bell) [RHEL-33903]
  - mm: hugetlb: avoid fallback for specific node allocation of 1G pages (CKI Backport Bot) [RHEL-78971]
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (CKI Backport Bot) [RHEL-70421]
  - can: raw: raw_getsockopt(): reduce scope of err (Radu Rendec) [RHEL-84144]
  - can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS (Radu Rendec) [RHEL-84144]
  - can: canxl: add virtual CAN network identifier support (Radu Rendec) [RHEL-84144]
  - can: isotp: support dynamic flow control parameters (Radu Rendec) [RHEL-84144]
  - can: bcm: add recvmsg flags for own, local and remote traffic (Radu Rendec) [RHEL-84144]
  - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (Radu Rendec) [RHEL-84144]
  - can: dev: add can_state_get_by_berr_counter() to return the CAN state based on the current error counters (Radu Rendec) [RHEL-84144]
  - can: raw: Remove NULL check before dev_{put, hold} (Radu Rendec) [RHEL-84144]
  - can: raw: add missing refcount for memory leak fix (Radu Rendec) [RHEL-84144]
  - can: rx-offload: add can_rx_offload_get_echo_skb_queue_tail() (Radu Rendec) [RHEL-84144]
  - can: rx-offload: rename rx_offload_get_echo_skb() -> can_rx_offload_get_echo_skb_queue_timestamp() (Radu Rendec) [RHEL-84144]
  - can: raw: fix lockdep issue in raw_release() (Radu Rendec) [RHEL-84144]
  - can: raw: fix receiver memory leak (Radu Rendec) [RHEL-84144]
  - can: uapi: move CAN_RAW_FILTER_MAX definition to raw.h (Radu Rendec) [RHEL-84144]
  - can: length: refactor frame lengths definition to add size in bits (Radu Rendec) [RHEL-84144]
  - can: length: fix description of the RRS field (Radu Rendec) [RHEL-84144]
  - can: length: fix bitstuffing count (Radu Rendec) [RHEL-84144]
  - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Radu Rendec) [RHEL-84144]
  - can: j1939: change j1939_netdev_lock type to mutex (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Radu Rendec) [RHEL-84144]
  - can: length: make header self contained (Radu Rendec) [RHEL-84144]
  - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-84144]
  - can: isotp: add module parameter for maximum pdu size (Radu Rendec) [RHEL-84144]
  - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Radu Rendec) [RHEL-84144]
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Radu Rendec) [RHEL-84144]
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Radu Rendec) [RHEL-84144]
  - can: bittiming: can_calc_bittiming(): add missing parameter to no-op function (Radu Rendec) [RHEL-84144]
  - can: raw: use temp variable instead of rolling back config (Radu Rendec) [RHEL-84144]
  - can: j1939: do not wait 250 ms if the same addr was already claimed (Radu Rendec) [RHEL-84144]
  - can: isotp: check CAN address family in isotp_bind() (Radu Rendec) [RHEL-84144]
  - can: gw: give feedback on missing CGW_FLAGS_CAN_IIF_TX_OK flag (Radu Rendec) [RHEL-84144]
  - can: raw: fix CAN FD frame transmissions over CAN XL devices (Radu Rendec) [RHEL-84144]
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Radu Rendec) [RHEL-84144]
  - can: raw: add support for SO_MARK (Radu Rendec) [RHEL-84144]
  - net: af_can: remove useless parameter 'err' in 'can_rx_register()' (Radu Rendec) [RHEL-84144]
  - can: sja1000: fix size of OCR_MODE_MASK define (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Radu Rendec) [RHEL-84144]
  - can: af_can: fix NULL pointer dereference in can_rx_register() (Radu Rendec) [RHEL-84144]
  - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_eoma(): fix debug info (Radu Rendec) [RHEL-84144]
  - can: add termination resistor documentation (Radu Rendec) [RHEL-84144]
  - can: bcm: check the result of can_send() in bcm_can_tx() (Radu Rendec) [RHEL-84144]
  - can: bcm: registration process optimization in bcm_module_init() (Radu Rendec) [RHEL-84144]
  - can: raw: add CAN XL support (Radu Rendec) [RHEL-84144]
  - can: raw: use guard clause to optimize nesting in raw_rcv() (Radu Rendec) [RHEL-84144]
  - can: raw: process optimization in raw_init() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Radu Rendec) [RHEL-84144]
  - can: error: add definitions for the different CAN error thresholds (Radu Rendec) [RHEL-84144]
  - can: error: specify the values of data[5..7] of CAN error frames (Radu Rendec) [RHEL-84144]
  - can: bcm: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
  - can: Break loopback loop on loopback documentation (Radu Rendec) [RHEL-84144]
  - can: raw: add support for SO_TXTIME/SCM_TXTIME (Radu Rendec) [RHEL-84144]
  - can: raw: raw_sendmsg(): remove not needed setting of skb->sk (Radu Rendec) [RHEL-84144]
  - can: gw: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
  - can: isotp: convert struct tpcon::{idx,len} to unsigned int (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_can_recv(): ignore messages with invalid source address (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Radu Rendec) [RHEL-84144]
  - can: bcm: Use hrtimer_forward_now() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Radu Rendec) [RHEL-84144]
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Radu Rendec) [RHEL-84144]
  - can: j1939: extend UAPI to notify about RX status (Radu Rendec) [RHEL-84144]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_dat(): fix typo (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_dat_one(): use separate pointer for session skb control buffer (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_dat(): use consistent name se_skcb for session skb control buffer (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_completed(): use consistent name se_skb for the session skb (Radu Rendec) [RHEL-84144]
  - can: j1939: replace fall through comment by fallthrough pseudo-keyword (Radu Rendec) [RHEL-84144]
  - can: j1939: fix checkpatch warnings (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_sock_destruct(): correct a grammatical error (Radu Rendec) [RHEL-84144]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-577.el9]
changelog:
  - xfs: fix freeing speculative preallocations for preallocated files (CKI Backport Bot) [RHEL-56816]
  - i2c: i801: Add lis3lv02d for Dell Precision M6800 (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Add support for probing for the accelerometer i2c address (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Add a couple more models to lis3lv02d_devices[] (David Arcari) [RHEL-47426]
  - i2c: i801: Remove unnecessary PCI function call (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Move instantiation of lis3lv02d i2c_client from i2c-i801 to dell-lis3lv02d (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Move SMO88xx acpi_device_ids to dell-smo8800-ids.h (David Arcari) [RHEL-47426]
  - platform/x86: dell: dell-smo8800: Convert to platform remove callback returning void (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Use min_t() for comparison and assignment (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Convert to be a platform driver (David Arcari) [RHEL-47426]
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (David Arcari) [RHEL-47426]
  - i2c: i801: Add support for Intel Panther Lake (David Arcari) [RHEL-47426]
  - i2c: i801: Use a different adapter-name for IDF adapters (David Arcari) [RHEL-47426]
  - i2c: i801: reword according to newest specification (David Arcari) [RHEL-47426]
  - i2c: i801: remove printout on handled timeouts (David Arcari) [RHEL-47426]
  - i2c: i801: Annotate apanel_addr as __ro_after_init (David Arcari) [RHEL-47426]
  - i2c: i801: Remove usage of I2C_CLASS_SPD (David Arcari) [RHEL-47426]
  - i2c: i801: Fix missing Kconfig dependency (David Arcari) [RHEL-47426]
  - i2c: i801: Call i2c_register_spd for muxed child segments (David Arcari) [RHEL-47426]
  - i2c: i801: Fix a refactoring that broke a touchpad on Lenovo P1 (David Arcari) [RHEL-47426]
  - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (David Arcari) [RHEL-47426]
  - i2c: i801: Fix using mux_pdev before it's set (David Arcari) [RHEL-47426]
  - i2c: i801: Add helper i801_get_block_len (David Arcari) [RHEL-47426]
  - i2c: i801: Add SMBUS_LEN_SENTINEL (David Arcari) [RHEL-47426]
  - i2c: i801: Split i801_block_transaction (David Arcari) [RHEL-47426]
  - i2c: i801: Add helper i801_check_and_clear_pec_error (David Arcari) [RHEL-47426]
  - i2c: i801: Define FEATURES_ICH5 as an extension of FEATURES_ICH4 (David Arcari) [RHEL-47426]
  - i2c: i801: Remove unused argument from tco functions (David Arcari) [RHEL-47426]
  - i2c: i801: Replace magic value with constant in dmi_check_onboard_devices (David Arcari) [RHEL-47426]
  - i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (David Arcari) [RHEL-47426]
  - i2c: i801: Add lis3lv02d for Dell Precision 3540 (David Arcari) [RHEL-47426]
  - i2c: i801: Use new helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
  - ACPI: Add helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
  - i2c: i801: Simplify class-based client device instantiation (David Arcari) [RHEL-47426]
  - i2c: i801: replace acpi_lock with I2C bus lock (David Arcari) [RHEL-47426]
  - i2c: i801: use i2c_mark_adapter_suspended/resumed (David Arcari) [RHEL-47426]
  - i2c: i801: simplify module boilerplate code (David Arcari) [RHEL-47426]
  - i2c: i801: add helper i801_restore_regs (David Arcari) [RHEL-47426]
  - tracing/histogram: Fix semicolon.cocci warnings (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Fix documentation inline emphasis warning (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Fix check for missing operands in an expression (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Document expression arithmetic and constants (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Optimize division by a power of 2 (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Covert expr to const if both operands are constants (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Simplify handling of .sym-offset in expressions (Tomas Glozar) [RHEL-67679]
  - tracing: Fix operator precedence for hist triggers expression (Tomas Glozar) [RHEL-67679]
  - tracing: Add division and multiplication support for hist triggers (Tomas Glozar) [RHEL-67679]
  - tracing: Add support for creating hist trigger variables from literal (Tomas Glozar) [RHEL-67679]
  - tracing: Have histogram types be constant when possible (Tomas Glozar) [RHEL-67679]
  - powercap: intel_rapl: Add support for Panther Lake platform (David Arcari) [RHEL-47408]
  - powercap: call put_device() on an error path in powercap_register_control_type() (David Arcari) [RHEL-47408]
  - ext4: fallback to complex scan if aligned scan doesn't work (Brian Foster) [RHEL-83284]
  - nfsd: adjust WARN_ON_ONCE in revoke_delegation (Olga Kornievskaia) [RHEL-74439]
  - uki: get rid of RHEL-only walinuxagentcvm module in the initramfs (Vitaly Kuznetsov) [RHEL-83003]
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CKI Backport Bot) [RHEL-82517] {CVE-2024-58077}
  - team: better TEAM_OPTION_TYPE_STRING validation (CKI Backport Bot) [RHEL-81462] {CVE-2025-21787}
  - redhat: drop Y issues from changelog (Jan Stancek)
  - Reapply "perf util: Make util its own library" (Michael Petlan) [RHEL-79032]
  - iommu/vt-d: Fix suspicious RCU usage (Jerry Snitselaar) [RHEL-70102]
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Jerry Snitselaar) [RHEL-70102]
  - Revert "x86: bring back rep movsq for user access on CPUs without ERMS" (Herton R. Krzesinski) [RHEL-79780]
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75649] {CVE-2025-21663}
  - net: stmmac: Fix zero-division error when disabling tc cbs (Izabela Bakollari) [RHEL-63931] {CVE-2024-49977}
  - configs: enable FW_CACHE on centos-stream/rhel 9 for nouveau (Dave Airlie) [RHEL-79929]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80224]
  - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-77720]
  - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-77720]
  - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-75828] {CVE-2024-56623}
  - nfsd: validate the nfsd_serv pointer before calling svc_wake_up (Olga Kornievskaia) [RHEL-69769]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-578.el9]
changelog:
  - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs (David Arcari) [RHEL-47428]
  - mfd: intel-lpss: Switch over to MSI interrupts (David Arcari) [RHEL-47428]
  - main.c: fix initcall blacklisted (Tomas Henzl) [RHEL-83272]
  - block: change blk_mq_add_to_batch() third argument type to bool (Ming Lei) [RHEL-79409]
  - nvme: move error logging from nvme_end_req() to __nvme_end_req() (Ming Lei) [RHEL-79409]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-79409]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-79409]
  - Add CONFIG_SCSI_PROTO_TEST entry (Ming Lei) [RHEL-79409]
  - ext4: pass write-hint for buffered IO (Ming Lei) [RHEL-79409]
  - scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices (Ming Lei) [RHEL-79409]
  - scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag (Ming Lei) [RHEL-79409]
  - scsi: sd: Only print updates to permanent stream count (Ming Lei) [RHEL-79409]
  - Add CONFIG_OF_PARTITION entry (Ming Lei) [RHEL-79409]
  - arm64: patching: avoid early page_to_phys() (Ming Lei) [RHEL-79409]
  - arm64: patching: fix handling of execmem addresses (Ming Lei) [RHEL-79409]
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei) [RHEL-79409]
  - block: Remove zone write plugs when handling native zone append writes (Ming Lei) [RHEL-79409]
  - block: make segment size limit workable for > 4K PAGE_SIZE (Ming Lei) [RHEL-79409]
  - block: fix NULL pointer dereferenced within __blk_rq_map_sg (Ming Lei) [RHEL-79409]
  - block/merge: remove unnecessary min() with UINT_MAX (Ming Lei) [RHEL-79409]
  - partitions: mac: fix handling of bogus partition table (Ming Lei) [RHEL-79409]
  - block: cleanup and fix batch completion adding conditions (Ming Lei) [RHEL-79409]
  - drivers/block/sunvdc.c: update the correct AIP call (Ming Lei) [RHEL-79409]
  - block: force noio scope in blk_mq_freeze_queue (Ming Lei) [RHEL-79409]
  - block: fix nr_hw_queue update racing with disk addition/removal (Ming Lei) [RHEL-79409]
  - block: get rid of request queue ->sysfs_dir_lock (Ming Lei) [RHEL-79409]
  - loop: don't clear LO_FLAGS_PARTSCAN on LOOP_SET_STATUS{,64} (Ming Lei) [RHEL-79409]
  - blk-mq: create correct map for fallback case (Ming Lei) [RHEL-79409]
  - block: don't revert iter for -EIOCBQUEUED (Ming Lei) [RHEL-79409]
  - block: Don't trim an atomic write (Ming Lei) [RHEL-79409]
  - block: limit disk max sectors to (LLONG_MAX >> 9) (Ming Lei) [RHEL-79409]
  - block: Change blk_stack_atomic_writes_limits() unit_min check (Ming Lei) [RHEL-79409]
  - blk-mq: Move more error handling into blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - block: Reorder the request allocation code in blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - partitions: ldm: remove the initial kernel-doc notation (Ming Lei) [RHEL-79409]
  - blk-cgroup: rwstat: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - blk-cgroup: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - block: mark GFP_NOIO around sysfs ->store() (Ming Lei) [RHEL-79409]
  - loop: remove the use_dio field in struct loop_device (Ming Lei) [RHEL-79409]
  - loop: don't freeze the queue in loop_update_dio (Ming Lei) [RHEL-79409]
  - loop: allow loop_set_status to re-enable direct I/O (Ming Lei) [RHEL-79409]
  - loop: open code the direct I/O flag update in loop_set_dio (Ming Lei) [RHEL-79409]
  - loop: only write back pagecache when starting to to use direct I/O (Ming Lei) [RHEL-79409]
  - loop: create a lo_can_use_dio helper (Ming Lei) [RHEL-79409]
  - loop: update commands in loop_set_status still referring to transfers (Ming Lei) [RHEL-79409]
  - loop: move updating lo_flags out of loop_set_status_from_info (Ming Lei) [RHEL-79409]
  - nbd: don't allow reconnect after disconnect (Ming Lei) [RHEL-79409]
  - block: simplify tag allocation policy selection (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_NO_SCHED (Ming Lei) [RHEL-79409]
  - block: remove blk_mq_init_bitmaps (Ming Lei) [RHEL-79409]
  - block: better split mq vs non-mq code in add_disk_fwnode (Ming Lei) [RHEL-79409]
  - block: add a dma mapping iterator (Ming Lei) [RHEL-79409]
  - block: use page_to_phys in bvec_phys (Ming Lei) [RHEL-79409]
  - block: remove blk_rq_bio_prep (Ming Lei) [RHEL-79409]
  - block: remove bio_add_pc_page (Ming Lei) [RHEL-79409]
  - block/blk-map: Remove set but unused variable 'added' (Ming Lei) [RHEL-79409]
  - ps3disk: Do not use dev->bounce_size before it is set (Ming Lei) [RHEL-79409]
  - block: retry call probe after request_module in blk_request_module (Ming Lei) [RHEL-79409]
  - kyber: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block, bfq: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block: mq-deadline: Constify sysfs attributes (Ming Lei) [RHEL-79409]
  - elevator: Enable const sysfs attributes (Ming Lei) [RHEL-79409]
  - blk-zoned: Split queue_zone_wplugs_show() (Ming Lei) [RHEL-79409]
  - blk-zoned: Improve the queue reference count strategy documentation (Ming Lei) [RHEL-79409]
  - blk-zoned: Document locking assumptions (Ming Lei) [RHEL-79409]
  - blk-zoned: Minimize #include directives (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_SHOULD_MERGE (Ming Lei) [RHEL-79409]
  - blk-mq: remove unused queue mapping helpers (Ming Lei) [RHEL-79409]
  - virtio: blk/scsi: replace blk_mq_virtio_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - nvme: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - blk-mq: introduce blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - virtio: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - PCI: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - driver core: bus: add irq_get_affinity callback to bus_type (Ming Lei) [RHEL-79409]
  - null_blk: Remove accesses to page->index (Ming Lei) [RHEL-79409]
  - blktrace: remove redundant return at end of function (Ming Lei) [RHEL-79409]
  - block: Delete bio_prio() (Ming Lei) [RHEL-79409]
  - blktrace: move copy_[to|from]_user() out of ->debugfs_lock (Ming Lei) [RHEL-79409]
  - blktrace: don't centralize grabbing q->debugfs_mutex in blk_trace_ioctl (Ming Lei) [RHEL-79409]
  - null_blk: Add rotational feature support (Ming Lei) [RHEL-79409]
  - block: track queue dying state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: don't verify queue freeze manually in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: track disk DEAD state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: remove unnecessary check in blk_unfreeze_check_owner() (Ming Lei) [RHEL-79409]
  - asm-generic: add an optional pfn_valid check to page_to_phys (Ming Lei) [RHEL-79409]
  - asm-generic: provide generic page_to_phys and phys_to_page implementations (Ming Lei) [RHEL-79409]
  - cdrom: Fix typo, 'devicen' to 'device' (Ming Lei) [RHEL-79409]
  - block: avoid to reuse `hctx` not removed from cpuhp callback list (Ming Lei) [RHEL-79409]
  - nvme: use blk_validate_block_size() for max LBA check (Ming Lei) [RHEL-79409]
  - block/bdev: use helper for max block size check (Ming Lei) [RHEL-79409]
  - block: Fix queue_iostats_passthrough_show() (Ming Lei) [RHEL-79409]
  - blk-mq: Clean up blk_mq_requeue_work() (Ming Lei) [RHEL-79409]
  - mq-deadline: Remove a local variable (Ming Lei) [RHEL-79409]
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Ming Lei) [RHEL-79409]
  - block: Make bio_iov_bvec_set() accept pointer to const iov_iter (Ming Lei) [RHEL-79409]
  - block: get wp_offset by bdev_offset_from_zone_start (Ming Lei) [RHEL-79409]
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock (Ming Lei) [RHEL-79409]
  - blk-mq: register cpuhp callback after hctx is added to xarray table (Ming Lei) [RHEL-79409]
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [RHEL-79409]
  - brd: decrease the number of allocated pages which discarded (Ming Lei) [RHEL-79409]
  - block: Don't allow an atomic write be truncated in blkdev_write_iter() (Ming Lei) [RHEL-79409]
  - fs: Export generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block: Add bdev atomic write limits helpers (Ming Lei) [RHEL-79409]
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block/fs: Pass an iocb to generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - mq-deadline: don't call req_get_ioprio from the I/O completion handler (Ming Lei) [RHEL-79409]
  - block: Remove extra part pointer NULLify in blk_rq_init() (Ming Lei) [RHEL-79409]
  - block: return bool from get_disk_ro and bdev_read_only (Ming Lei) [RHEL-79409]
  - block: remove a duplicate definition for bdev_read_only (Ming Lei) [RHEL-79409]
  - block: return bool from blk_rq_aligned (Ming Lei) [RHEL-79409]
  - block: return unsigned int from blk_lim_dma_alignment_and_pad (Ming Lei) [RHEL-79409]
  - block: return unsigned int from queue_dma_alignment (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_opt (Ming Lei) [RHEL-79409]
  - block: req->bio is always set in the merge code (Ming Lei) [RHEL-79409]
  - block: don't bother checking the data direction for merges (Ming Lei) [RHEL-79409]
  - block: blk-mq: fix uninit-value in blk_rq_prep_clone and refactor (Ming Lei) [RHEL-79409]
  - block: Add extra checks in blk_validate_atomic_write_limits() (Ming Lei) [RHEL-79409]
  - block: Drop granularity check in queue_limit_discard_alignment() (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_min (Ming Lei) [RHEL-79409]
  - blk-settings: round down io_opt to physical_block_size (Ming Lei) [RHEL-79409]
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive (Ming Lei) [RHEL-79409]
  - block: make struct rq_list available for !CONFIG_BLOCK (Ming Lei) [RHEL-79409]
  - block/genhd: use seq_put_decimal_ull for diskstats decimal values (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_mq_add_to_batch (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_add_rq_to_plug (Ming Lei) [RHEL-79409]
  - block: add a rq_list type (Ming Lei) [RHEL-79409]
  - block: remove rq_list_move (Ming Lei) [RHEL-79409]
  - virtio_blk: reverse request order in virtio_queue_rqs (Ming Lei) [RHEL-79409]
  - nvme-pci: reverse request order in nvme_queue_rqs (Ming Lei) [RHEL-79409]
  - block: export blk_validate_limits (Ming Lei) [RHEL-79409]
  - block: remove the ioprio field from struct request (Ming Lei) [RHEL-79409]
  - block: remove the write_hint field from struct request (Ming Lei) [RHEL-79409]
  - scsi: sd: Translate data lifetime information (Ming Lei) [RHEL-79409]
  - scsi: scsi_proto: Add structures and constants related to I/O groups and streams (Ming Lei) [RHEL-79409]
  - scsi: core: Query the Block Limits Extension VPD page (Ming Lei) [RHEL-79409]
  - block, fs: Restore the per-bio/request data lifetime fields (Ming Lei) [RHEL-79409]
  - fs: Propagate write hints to the struct block_device inode (Ming Lei) [RHEL-79409]
  - fs: Move enum rw_hint into a new header file (Ming Lei) [RHEL-79409]
  - fs: Split fcntl_rw_hint() (Ming Lei) [RHEL-79409]
  - fs: Verify write lifetime constants at compile time (Ming Lei) [RHEL-79409]
  - fs: Fix rw_hint validation (Ming Lei) [RHEL-79409]
  - nvme-multipath: don't bother clearing max_hw_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: pre-calculate max_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: lift bio_is_zone_append to bio.h (Ming Lei) [RHEL-79409]
  - block: fix bio_split_rw_at to take zone_write_granularity into account (Ming Lei) [RHEL-79409]
  - block: take chunk_sectors into account in bio_split_write_zeroes (Ming Lei) [RHEL-79409]
  - block: Handle bio_split() errors in bio_submit_split() (Ming Lei) [RHEL-79409]
  - block: Error an attempt to split an atomic write in bio_split() (Ming Lei) [RHEL-79409]
  - block: Rework bio_split() return value (Ming Lei) [RHEL-79409]
  - s390/dasd: Fix typo in comment (Ming Lei) [RHEL-79409]
  - s390/dasd: fix redundant /proc/dasd* entries removal (Ming Lei) [RHEL-79409]
  - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: always verify unfreeze lock on the owner task (Ming Lei) [RHEL-79409]
  - rbd: unfreeze queue after marking disk as dead (Ming Lei) [RHEL-79409]
  - block: remove blk_freeze_queue() (Ming Lei) [RHEL-79409]
  - block: Replace sprintf() with sysfs_emit() (Ming Lei) [RHEL-79409]
  - nvme: add reservation command's defines (Ming Lei) [RHEL-79409]
  - mtip32xx: Replace deprecated PCI functions (Ming Lei) [RHEL-79409]
  - block: remove the max_zone_append_sectors check in blk_revalidate_disk_zones (Ming Lei) [RHEL-79409]
  - block: update blk_stack_limits documentation (Ming Lei) [RHEL-79409]
  - lib/iov_iter: fix bvec iterator setup (Ming Lei) [RHEL-79409]
  - block: remove bio_add_zone_append_page (Ming Lei) [RHEL-79409]
  - lib/iov_iter.c: initialize bi.bi_idx before iterating over bvec (Ming Lei) [RHEL-79409]
  - blk-integrity: remove seed for user mapped buffers (Ming Lei) [RHEL-79409]
  - block: set bip_vcnt correctly (Ming Lei) [RHEL-79409]
  - block: add a bdev_limits helper (Ming Lei) [RHEL-79409]
  - iov_iter: don't require contiguous pages in iov_iter_extract_bvec_pages (Ming Lei) [RHEL-79409]
  - block: model freeze & enter queue as lock for supporting lockdep (Ming Lei) [RHEL-79409]
  - nvme: core: switch to non_owner variant of start_freeze/unfreeze queue (Ming Lei) [RHEL-79409]
  - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs (Ming Lei) [RHEL-79409]
  - blk-mq: Unexport blk_mq_flush_busy_ctxs() (Ming Lei) [RHEL-79409]
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long (Ming Lei) [RHEL-79409]
  - block: remove redundant explicit memory barrier from rq_qos waiter and waker (Ming Lei) [RHEL-79409]
  - block: flush all throttled bios when deleting the cgroup (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding (Ming Lei) [RHEL-79409]
  - block: fix missing dispatching request when queue is started or unquiesced (Ming Lei) [RHEL-79409]
  - Revert "blk-throttle: Fix IO hang for a corner case" (Ming Lei) [RHEL-79409]
  - block: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Ming Lei) [RHEL-79409]
  - block: enable passthrough command statistics (Ming Lei) [RHEL-79409]
  - block: add partition uuid into uevent as "PARTUUID" (Ming Lei) [RHEL-79409]
  - block: move issue side time stamping to blk_account_io_start() (Ming Lei) [RHEL-79409]
  - block: set issue time stamp based on queue state (Ming Lei) [RHEL-79409]
  - block: add support for partition table defined in OF (Ming Lei) [RHEL-79409]
  - mmc: block: attach partitions fwnode if found in mmc-card (Ming Lei) [RHEL-79409]
  - block: introduce add_disk_fwnode() (Ming Lei) [RHEL-79409]
  - docs: block: Document support for read-only partition in cmdline part (Ming Lei) [RHEL-79409]
  - block: add support for defining read-only partitions (Ming Lei) [RHEL-79409]
  - block: kill blk_do_io_stat() helper (Ming Lei) [RHEL-79409]
  - block: remove 'req->part' check for stats accounting (Ming Lei) [RHEL-79409]
  - block: remove redundant passthrough check in blk_mq_need_time_stamp() (Ming Lei) [RHEL-79409]
  - block: move iostat check into blk_acount_io_start() (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_make_it_fail to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_ro_warned to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_has_subit_bio to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_write_holder into ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_read_only to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: infrastructure for flags (Ming Lei) [RHEL-79409]
  - wrapper for access to ->bd_partno (Ming Lei) [RHEL-79409]
  - Use bdev_is_paritition() instead of open-coding it (Ming Lei) [RHEL-79409]
  - nfsd: clear acl_access/acl_default after releasing them (Olga Kornievskaia) [RHEL-81523] {CVE-2025-21796}
  - vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-73613]
  - vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-73613]
  - vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-73613]
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-73613]
  - vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-73613]
  - mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm/x86: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: follow_pte() improvements (Donald Dutile) [RHEL-73613]
  - mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - KVM: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-73613]
  - mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-73613]
  - mm: new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pfn (Donald Dutile) [RHEL-73613]
  - mm: always define pxx_pgprot() (Donald Dutile) [RHEL-73613]
  - mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-73613]
  - mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-73613]
  - mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-73613]
  - mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-73613]
  - mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-73613]
  - mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-73613]
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-73613]
  - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Initialize HCR_EL2.E2H early (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Shave a few bytes from the EL2 idmap code (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix tcr_el2 initialisation in hVHE mode (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Hoist SGI/PPI alloc from vgic_init() to kvm_create_vgic() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Drop warning on failed interrupt signalling (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix alignment of kvm_hyp_memcache allocations (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Simplify warning in kvm_arch_vcpu_load_fp() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Always evaluate the need for a soft timer (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nested S2 MMU structures reallocation (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fail protected mode init if no vgic hardware is present (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Mark some header functions as inline (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Refactor exit handlers (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add predicate for FPMR support in a VM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Flush hyp bss section after initialization of variables in bss (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix selftests after sysreg field name update (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Explicitly handle BRBE traps as UNDEFINED (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Use str_enabled_disabled() in vgic_v3_probe() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nVHE stacktrace VA bits mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix FEAT_MTE in pKVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Advertise the lack of AArch32 EL0 support (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix the value of the CPTR_EL2 RES1 bitmask for nVHE (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix RAS trapping in pKVM for protected VMs (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Drop MDSCR_EL1_DEBUG_MASK (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Avoid invalid physical addresses to signal owner updates (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Reload PMU events upon MDCR_EL2.HPME change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Use KVM_REQ_RELOAD_PMU to handle PMCR_EL0.E change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add unified helper for reprogramming counters by mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Always check the state from hyp_ack_unshare() (Gavin Shan) [RHEL-82298]
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-85597] {CVE-2024-58007}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-85597]
  - soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-85597]
  - mm/mm_init.c: print mem_init info after defer_init is done (Eric Chanudet) [RHEL-85565]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial] (David Arcari) [RHEL-85522]
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (David Arcari) [RHEL-85522]
  - intel_idle: introduce 'no_native' module parameter (David Arcari) [RHEL-85522]
  - intel_idle: clean up BYT/CHT auto demotion disable (David Arcari) [RHEL-85522]
  - intel_idle: Provide the default enter_dead() handler (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Export acpi_processor_ffh_play_dead() (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Add FFH state handling (David Arcari) [RHEL-85522]
  - x86/smp: Allow calling mwait_play_dead with an arbitrary hint (David Arcari) [RHEL-85522]
  - cpuidle: Change :enter_dead() driver callback return type to void (David Arcari) [RHEL-85522]
  - cpuidle: Do not return from cpuidle_play_dead() on callback failures (David Arcari) [RHEL-85522]
  - x86/cpu: Remove unnecessary MwAIT leaf checks (David Arcari) [RHEL-85522]
  - intel_idle: add Clearwater Forest SoC support (David Arcari) [RHEL-45063]
  - sched/stats: Print domain name in /proc/schedstat (Phil Auld) [RHEL-23495]
  - docs: Update Schedstat version to 17 (Phil Auld) [RHEL-23495]
  - sched/fair: Cleanup in migrate_degrades_locality() to improve readability (Phil Auld) [RHEL-23495]
  - sched: Report the different kinds of imbalances in /proc/schedstat (Phil Auld) [RHEL-23495]
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG (Phil Auld) [RHEL-23495]
  - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Phil Auld) [RHEL-23495]
  - RDMA/core: Support link status events dispatching (Kamal Heib) [RHEL-78087]
  - RDMA/core: Add ib_query_netdev_port() to query netdev port by IB device. (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_copy_path_rec_from_user (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ibdev_printk (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_find_exact_cached_pkey (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_ud_header_unpack (Kamal Heib) [RHEL-78087]
  - RDMA/srp: Fix error handling in srp_add_port (Kamal Heib) [RHEL-78087]
  - padata: avoid UAF for reorder_work (Waiman Long) [RHEL-81522] {CVE-2025-21726}
  - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-81522]
  - padata: add pd get/put refcnt helper (Waiman Long) [RHEL-81522]
  - padata: fix sysfs store callback check (Waiman Long) [RHEL-81522]
  - padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-81522]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-69649 RHEL-83224] {CVE-2025-21864}
  - cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (David Arcari) [RHEL-85517]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (David Arcari) [RHEL-85517]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Relocate platform preference check (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Make it possible to avoid enabling CAS (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPUFREQ_POLICY_UNKNOWN (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Drop Arrow Lake from "scaling factor" list (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPPC to get scaling factors (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Rearrange locking in hybrid_init_cpu_capacity_scaling() (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Clear hybrid_max_perf_cpu before driver registration (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Fix energy_performance_preference for passive (David Arcari) [RHEL-85517]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-579.el9]
changelog:
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Li Wang) [RHEL-85318]
  - selftests/mm: va_high_addr_switch: reduce test noise (Li Wang) [RHEL-85318]
  - redhat: spec: fix "unexpected argument to non-parametric macro" warnings (Augusto Caringi)
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Anubhav Shelat) [RHEL-78426]
  - powerpc/pseries: make max polling consistent for longer H_CALLs (Mamatha Inamdar) [RHEL-79919]
  - Fix mmu notifiers for range-based invalidates (Charles Mirabile) [RHEL-83459]
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Jared Kangas) [RHEL-84805] {CVE-2024-58068}
  - OPP: add index check to assert to avoid buffer overflow in _read_freq() (Jared Kangas) [RHEL-81432] {CVE-2024-57998}
  - OPP: Add dev_pm_opp_find_freq_exact_indexed() (Jared Kangas) [RHEL-81432]
  - s390/diag: Move diag.c to diag specific folder (Mete Durlu) [RHEL-72676]
  - s390/diag324: Retrieve power readings via diag 0x324 (Mete Durlu) [RHEL-72676]
  - s390/diag: Create misc device /dev/diag (Mete Durlu) [RHEL-72676]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-81064] {CVE-2024-54456}
  - mei: me: add panther lake P DID (David Arcari) [RHEL-79720]
  - block: fix adding folio to bio (Gavin Shan) [RHEL-79410]
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally (David Arcari) [RHEL-53784]
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly (David Arcari) [RHEL-53784]
  - x86/itmt: Move the "sched_itmt_enabled" sysctl to debugfs (David Arcari) [RHEL-53784]
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD (David Arcari) [RHEL-53784]
  - x86/itmt: Use guard() for itmt_update_mutex (David Arcari) [RHEL-53784]
  - x86/itmt: Convert "sysctl_sched_itmt_enabled" to boolean (David Arcari) [RHEL-53784]
  - perf tools: Fix build-id event recording (Michael Petlan) [RHEL-83537]
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Mamatha Inamdar) [RHEL-81040]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-29207]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-29207]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-29207]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-29207]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-29207]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-29207]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-29207]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-29207]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-29207]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-29207]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-29207]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-29207]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-29207]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-29207]
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CKI Backport Bot) [RHEL-82456] {CVE-2024-58069}


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-155.el9
changelog:
  - TEMPORARY FIX to correct build failures regarding blk_limits_io_{min,opt} error
  - Related: RHEL-61201


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Than Ngo <than@redhat.com> - 1.7.14-3
changelog:
  - Resolves: #2181241, lsvpd is not reporting the correct I/O microcode
    for HBA, PCIe, SAS adapters, HDD, etc


author: Than Ngo <than@redhat.com> - 1.7.14-4
changelog:
  - Related: #2181241, backport upstream patch to update update nvme_templates
    with logpage format for 0005 and 0006 versions


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
    RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
    RHEL-79252):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Than Ngo <than@redhat.com> - 1.3.13-1
changelog:
  - Resolves: RHEL-30880, multipath - drmgr support
  - Resolces: RHEL-61089, lparstat -E Fails to Display Correct Values for %Busy and %Idle States


author: Than Ngo <than@redhat.com> - 2.7.9-5
changelog:
  - man and help of diag_nvme are not in sync
  - compiler warnings
  - diag_nvme: call_home command fails on nvmf drive
  - rtas_errd: Fix core dump with large filename passed to -f option
  Resolves: RHEL-55398


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.47-1
changelog:
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  Resolves: RHEL-56988
  - Allow lldpad create and use netlink_generic_socket
  Resolves: RHEL-61832
  - Allow unconfined_t execute kmod in the kmod domain
  Resolves: RHEL-54710
  - Allow confined users r/w to screen unix stream socket
  Resolves: RHEL-50379
  - Label /root/.screenrc and /root/.tmux.conf with screen_home_t
  Resolves: RHEL-50375
  - Allow iio-sensor-proxy the bpf capability
  Resolves: RHEL-17346


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.48-1
changelog:
  - Revert "Allow unconfined_t execute kmod in the kmod domain"
  Resolves: RHEL-65008
  - Add policy for /usr/libexec/samba/samba-bgqd
  Resolves: RHEL-53124


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.49-1
changelog:
  - Update virtlogd policy
  Resolves: RHEL-69433
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Allow qemu-ga the dac_override and dac_read_search capabilities
  Resolves: RHEL-52476
  - Allow ip the setexec permission
  Resolves: RHEL-62923
  - Allow alsa get attributes filesystems with extended attributes
  Resolves: RHEL-61472
  - Allow bacula execute container in the container domain
  Resolves: RHEL-21168
  - Allow httpd get attributes of dirsrv unit files
  Resolves: RHEL-46808
  - Update samba-bgqd policy
  Resolves: RHEL-69517
  - Allow samba-bgqd read cups config files
  Resolves: RHEL-69517
  - Update policy for samba-bgqd
  Resolves: RHEL-69517
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-66584
  - Allow qatlib search the content of the kernel debugging filesystem
  Resolves: RHEL-53864
  - Allow qatlib connect to systemd-machined over a unix socket
  Resolves: RHEL-53864
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-53864


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.50-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-68969
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  Resolves: RHEL-69517
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-46339
  - Allow rpcd read network sysctls
  Resolves: RHEL-1558
  - Allow irqbalance setpcap capability in the user namespace
  Resolves: RHEL-69564
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-54561
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Change /run/sysctl\.d(/.*)? fc entry to /var/run/sysctl\.d(/.*)?
  Resolves: RHEL-56988
  - Exclude container-selinux manpage from selinux-policy-doc
  Resolves: RHEL-69916


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.51-1
changelog:
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-73839
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72860
  - Allow svirt_t read sysfs files
  Resolves: RHEL-70839
  - Allow xdm dbus chat with power-profiles-daemon
  Resolves: RHEL-61117
  - Update power-profiles-daemon policy
  Resolves: RHEL-61117
  - Confine power-profiles-daemon
  Resolves: RHEL-61117
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-56029
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-56029
  - Confine the switcheroo-control service
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.52-1
changelog:
  - Add the files_read_root_files() interface
  Resolves: RHEL-70849
  - Dontaudit systemd-logind remove all files
  Resolves: RHEL-59145
  - Add the files_dontaudit_read_all_dirs() interface
  Resolves: RHEL-59145
  - Add the files_dontaudit_delete_all_files() interface
  Resolves: RHEL-59145
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77152
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-1556
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-70849
  - Support using systemd containers
  Resolves: RHEL-76352
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  Resolves: RHEL-37539
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-1379
  - Allow telnetd read network sysctls
  Resolves: RHEL-58825
  - Allow alsa watch generic device directories
  Resolves: RHEL-61472
  - Update switcheroo policy
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
changelog:
  - Allow svirt_t to connect to nbdkit over a unix stream socket
  Resolves: RHEL-56029
  - Allow power-profiles-daemon the bpf capability
  Resolves: RHEL-61117
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-76352


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.54-1
changelog:
  - Confine tuned-ppd
  Resolves: RHEL-69526
  - Make tuned work with mls policy
  Resolves: RHEL-69526
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-79319


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.55-1
changelog:
  - Allow tuned-ppd read sssd public files
  Resolves: RHEL-69526
  - Allow systemd-journal-upload read init pid files
  Resolves: RHEL-62196
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-77319
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82308
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82308


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Jan Macku <jamacku@redhat.com> - 3:2.1.1-1
changelog:
  - rebase to 2.1.1 (RHEL-67117)
      Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

  	   There are no ipv4-mapped addresses in the real network which we
  	   operate on, so use just ipv4 in such cases, but allow users
  	   to specify it this way for convenience.

  	  Return back more robast poll(2) loop handling.


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-9
changelog:
  - Remove import and fix help message
  - Update manpages for argparse CLI changes
  Resolves: rhbz#2138692


author: John Kacur <jkacur@redhat.com> - 0.19-3
changelog:
  - Don't start the gui if a display is not available
  - Change to SPDX licence tag in the specfile
  Resolves: RHEL-8859


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-2
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-26860)


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74308)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84741)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-57
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45994


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-8000


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


