# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-4
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-35963]
  - Resolves: RHEL-35963
    ([Azure][WALA] Consider to disable Log collector [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-7
changelog:
  - wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
  - Resolves: RHEL-46713
    ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-9
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
  - Resolves: RHEL-68796
    (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-10
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
  - Resolves: RHEL-84073
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.13.1.1-2
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
  - Resolves: RHEL-109465
    ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
  - Resolves: RHEL-96792
    ([Azure][WALA][RHEL-10] Missing man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
  - Resolves: RHEL-114155
    ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.0-1
changelog:
  - aardvark-dns-1.13.0-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
  - Resolves: RHEL-65320


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-1
changelog:
  - aardvark-dns-1.13.1-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
  - Related: RHEL-58990


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.1
changelog:
  RHEL 10.1 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108928


author: Radovan Sroka <rsroka@redhat.com> - 0.18.4-1
changelog:
  - aide-0.18.4 is available
  Resolves: rhbz#1910486
  - Please port your pcre dependency to pcre2. Pcre has been deprecated
  Resolves: rhbz#2128267


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241210-11
changelog:
  - [AMDCLIENT 10.0 Feature] amdgpu linux-firmware for the 2025 H mobile platform (RHEL-61604)
  - [AMDCLIENT 10.0 Feature] linux-firmware for a 2025 mobile platform (RHEL-61477)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  Resolves: RHEL-61604, RHEL-61477


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250812-19
changelog:
  - Update linux-firmware to latest upstream (RHEL-108921)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates for various ASICs
  - panthor: Add firmware for more Mali GPUs
  - amdgpu: update renoir firmware
  - amdgpu: add SMU 14.0.3 kicker firmware
  - amdgpu: add PSP 14.0.3 firmware
  - amdgpu: add GC 12.0.1 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SDMA 7.0.1 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update SDMA 7.0.0 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - amdgpu: Update GCN 4.0.5 microcode
  - amdgpu: Update SDMA 6.1.0 microcode
  - amdgpu: Update GC 11.5.0 microcode
  - qcom: Add QDU100 firmware image files required for booting.
  - linux-firmware: Add firmware for airoha-npu driver
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - linux-firmware: Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: update dmcub fw for dcn314
  - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  - cirrus: cs35l41: Update Firmware for Dell Oasis
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - amdgpu: update dmcub fw for various DCN version
  - WHENCE: extract more license statements
  - WHENCE: clarify io_ti origin
  - amdgpu: Update GC 11.5.1 microcode
  - rtw89: 8852b: update fw to v0.29.128.0
  - rtw89: 8852bt: update fw to v0.29.127.0
  - rtw89: 8922a: add regd fw element with version R72-R6
  - rtw89: 8852c: add regd fw element with version R72-R57
  - rtw89: 8922a: update BB parameter V49
  - qcom: Update gpu firmwares of QCS615 chipset
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  Resolves: RHEL-108921


author: Denys Vlasenko <dvlasenk@redhat.com> - 20251111-20
changelog:
  - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
  - AMDGPU: Update firmware for Strix Halo (RHEL-104078)
  - AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
  - Update linux-firmware to latest upstream
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - Revert "rtw89: 8852b: update fw to v0.29.128.0"
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - rtw89: 8852bt: update fw to v0.29.122.1
  - Revert "rtw89: 8852bt: update fw to v0.29.127.0"
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - linux-firmware: Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7920 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443
  - Revert "linux-firmware: update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: Xe2LPD DMC v2.29
  - i915: Xe3LPD DMC v2.32
  - i915: Xe3LPD_3002 DMC v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - linux-firmware: Add ISH firmware file for Intel Pather Lake platform
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - WHENCE: extract multitech license text
  - WHENCE: extract ueagle license
  - WHENCE: use LICENCE.sensoray for s2255drv
  - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
  - WHENCE: clean up emi62 and yam license statements
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - linux-firmware: ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - amdgpu: DMCUB updates for various ASICs
  - mediatek: mtk_wed: drop links for mt7988
  - Revert "amdgpu: update gc 10.3.6 firmware"
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - amdgpu: DMCUB updates for various ASICs
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location
  - amdgpu: update PSP 14.0.3 kicker firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update SMU 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - intel_vpu: Update NPU firmware
  - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
  - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - amdgpu: Update ISP FW for isp v4.1.1
  - Update README.md to clarify S-o-b requirements
  - firmware: qcom: Reorder VPU firmware entries in WHENCE
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l41: Move entries to correct driver section in WHENCE
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - amdgpu: DMCUB updates for various ASICs
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  Resolves: RHEL-117675, RHEL-104078, RHEL-107606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260107-21
changelog:
  - Update linux-firmware to latest upstream (RHEL-119866)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - linux-firmware: add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - linux-firmware: update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - linux-firmware: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150 GPU
  - qcom: Add firmwares for sm8450 GPU
  - qcom: Add firmwares for sm8550 GPU
  - qcom: Add firmwares for sm8650 GPU
  - qcom: Add firmwares for sm8750 GPU
  - Makefile: add licence header
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - linux-firmware: Update amd-ucode copyright information
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - WHENCE: fix version string for video firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update smu 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992
  - mt76: update firmware for MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - linux-firmware: Update AMD cpu microcode
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  Resolves: RHEL-119866


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260130-22
changelog:
  - Update linux-firmware to latest upstream (RHEL-145527)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - linux-firmware: Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc FW for core102-56 release
  - iwlwifi: Add Hr/Gf firmware for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - linux-firmware: update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - linux-firmware: update firmware for MT7920 WiFi device
  Resolves: RHEL-145527


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.30-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-83924
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85415
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85415
  - ruff: enable isort rules and autofix all isort warnings (jkonecny)
    Resolves: RHEL-85415


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.31-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-79961
  - flatpak: Fix Flatpak source generation from DNF (jkonecny)
    Related: RHEL-75804
  - flatpak: Add constants for Flatpak (jkonecny)
    Related: RHEL-75804
  - flatpak: Change log level for source processing (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve log for setting refs for install (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve documentation (jkonecny)
    Related: RHEL-75804
  - flatpak: `NoSourceError` to `SourceSetupError` (jkonecny)
    Related: RHEL-75804
  - Fix imports in flatpak payload (jkonecny)
    Related: RHEL-75804
  - When installing Flatpaks from a local repository, disable download (otaylor)
    Related: RHEL-75804
  - Add additional logging to Flatpak code (jkonecny)
    Related: RHEL-75804
  - Fix directory where flatpak blobs are stored (jkonecny)
    Related: RHEL-75804
  - Add FlatpakManager tests (jkonecny)
    Related: RHEL-75804
  - Improve FlatpakManager testing (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak source.py (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak payload utils (jkonecny)
    Related: RHEL-75804
  - Extract flatpak.source utils to a separate module (jkonecny)
    Related: RHEL-75804
  - Add Flatpak tests for the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Do not allow any sources for Flatpak payload (jkonecny)
    Related: RHEL-75804
  - Support payload with no default source (jkonecny)
    Related: RHEL-75804
  - Add new API for Flatpak to CalculateSizeWithTask (jkonecny)
    Related: RHEL-75804
  - Add side_payload to PayloadBase object (jkonecny)
    Related: RHEL-75804
  - Add more logs for easier Flatpak module debugging (jkonecny)
    Related: RHEL-75804
  - Call calculate_size of the Flatpak manager (jkonecny)
    Related: RHEL-75804
  - Improve logging of the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Support Flatpak preinstallation as part of a DNF install (otaylor)
    Resolves: RHEL-75804
  - anaconda.spec: Add Flatpak client to Requires (otaylor)
    Resolves: RHEL-75804
  - Extract pick_download_location(), calculate_required_space() utilities
    (otaylor)
    Resolves: RHEL-75804
  - Move hardcoded flatpak remote to configuration (jkonecny)
    Related: RHEL-75804
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-83926


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.32-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101058
  - Remove unused Flatpak manager code (jkonecny)
    Resolves: RHEL-106503
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
    Resolves: RHEL-106503
  - Update to the approved version of the blivet change (a.badger)
    Resolves: RHEL-69878
  - Do not duplicate the DEVICE_TYPES enum in storage_constraints (a.badger)
    Resolves: RHEL-69878
  - Retrieve DEVICE_TYPES from blivet. (a.badger)
    Resolves: RHEL-69878


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.34-1
changelog:
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
    Resolves: RHEL-60724
  - gui: Fix GTK warnings when removing non-existent accelerators (k.koukiou)
    Resolves: RHEL-45999
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-61460
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-61460
  - Disable checking for the rdp verb in Anaconda (a.badger)


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.35-1
changelog:
  - Add release notes for RDP kickstart support (adamkankovsky)
    Resolves: RHEL-96216
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Adjust to pykickstart adding support for RDP (k.koukiou)
    Resolves: RHEL-96216
  - Adjust to pykickstart removing support for VNC (k.koukiou)
    Resolves: RHEL-119216
  - Remove temporary isFinal getter and DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - Add test for product DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - New getter for product in Runtime module (adamkankovsky)
    Resolves: RHEL-119216
  - Partial pick of 7a1ae76 (ruff/isort) limited to runtime (adamkankovsky)
    Resolves: RHEL-119216
  - Test for kickstart scripts (akankovs)
    Resolves: RHEL-119216
  - Migrate the %pre-install, %post, %onerror and %traceback scripts
    (akankovs)
    Resolves: RHEL-119216
  - Check if text mode was actually requested by kickstart (#2293672) (mkolman)
    Resolves: RHEL-119216
  - Get kickstart data via DBus (akankovs)
    Resolves: RHEL-119216
  - Adding a implementation for runtime and ui commands (akankovs)
    Resolves: RHEL-119216
  - Update tests for kickstart commands (akankovs)
    Resolves: RHEL-119216
  - Migration of the remaining kickstart commands to the Runtime module
    (akankovs)
    Resolves: RHEL-119216
  - Fix mock LUKS devices logic in tests (vtrefny)
  - Fix checking for locked LUKS devices (vtrefny)
  - Bump required version of blivet to 3.13 (vtrefny)
    Resolves: RHEL-115016
  - Catch blivet.errors.ISCSIError in ISCSIDiscoverTask (vtrefny)
    Resolves: RHEL-115016
  - Disable LVM auto-activation during installation (vtrefny)
    Resolves: RHEL-115016


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.36-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-118305
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-118305
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-118305
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-115411
  - Add pyproject.toml for project configuration (bciconel)
  - Support Flatpak installations from Satellite OCI registries (bciconel)
    Resolves: RHEL-95061
    Resolves: RHEL-95062
  - Configure default Flatpak remote for RHEL 10 (bciconel)
  - flatpak: enable installation with CDROM source type (bciconel)
    Resolves: RHEL-116800


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.38-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-58830


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.39-1
changelog:
  - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Collect kernel arguments before installation to pass to bootc
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
    Related: RHEL-58215
  - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
    Related: RHEL-58215
  - Add bootc installation method (ppolawsk)
    Resolves: RHEL-58215
  - Include bootc command in expected pykickstart commands (ppolawsk)
    Related: RHEL-58215


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79256)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-68490
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68468
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69315


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-101356


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106152


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-2
changelog:
  - Bump version to get automation to do builds and create an erratum
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release (RHEL-69036)
  - Add back ansible-test subpackage and drop doc subpackage
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging) (RHEL-59076)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content) (RHEL-69034)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release (RHEL-69763)
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core) (RHEL-66996)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35566
  - Convert input certificates
    Resolves: RHEL-44616
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40870


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67567
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61433


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67567
  - Fix requirements for ansible-core
    Resolves: RHEL-68648


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67567
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40228
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-70023
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68441
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70021
  - Collection: No more role module duplication
    Resolves: RHEL-71124


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67567
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78229


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104653
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92890
  - Provide compatibility for AAH naming
    Resolves: RHEL-89438
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-95104
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78635


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104653
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106560


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139147
  - Add suppport for passkey management
    Resolves: RHEL-139258
  - Add suppport for sysaccount management
    Resolves: RHEL-140600
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140606


author: Maxwell G <gotmax@e.email> - 2.2.7-2
changelog:
  - BuildRequire ansible-packaging on Fedora
  - Resolves: rhbz#2126889
  - Fix inverted conditionals and build/install the collection using ansible-galaxy
  - Keep ansible-lint disabled for now
  - Remove unnecessary macros
  - Exclude files with galaxy.yml build_ignore


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.12
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121558


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced in 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-17
changelog:
  - Do not remove PVs from devices file if disabled or doesn't exist
    Resolves: RHEL-65846
  - iscsi: Use node.startup=onboot option for Login
    Resolves: RHEL-53719
  - tests: Make sure selinux_test doesn't try to create mountpoints
    Resolves: RHEL-78988


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-18
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74076
  - Include additional information in PartitioningError
    Resolves: RHEL-84686


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-19
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-84685
    Resolves: RHEL-84663


author: Vojtech Trefny <vtrefny@redhat.com> - 3.13.0-3
changelog:
  - iSCSI: don't crash when LUN ID >= 256
    Resolves: RHEL-122305
  - Remove the safe_dbus module
    Related: RHEL-122305


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121729
  - Added channel binding support
  - resolves: RHEL-103400


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-15
changelog:
  - ci-cc_disk_setup-add-sgdisk-to-sfdisk-convertion-dictio.patch [RHEL-36093]
  - ci-Get-rid-of-gdisk-dependency.patch [RHEL-36093]
  - Resolves: RHEL-36093
    (Remove cloud-init dependency on obsolete gdisk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-16
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54372]
  - Resolves: RHEL-54372
    ([RHEL10]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-17
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54688]
  - Resolves: RHEL-54688
    ([RHEL 10.0] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-19
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016]
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019]
  - Resolves: RHEL-65016
    (Configuring metric for default gateway is not working [rhel-10])
  - Resolves: RHEL-65019
    (NoCloud - network_config bridges incorrectly configured [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-6
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
  - Resolves: RHEL-128097
    ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Resolves: RHEL-85671


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 4:2.246.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0
  - Resolves: RHEL-143694


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.62.0-2
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-7.el10
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:0.64.0-5
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111917


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240807-1.git7ea320f
changelog:
  - fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
changelog:
  - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - LEGACY: drop cipher@pkcs12 = SEED-CBC
  - fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  - nss: be stricter with new purposes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
changelog:
  - TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
  - openssh: remove sntrup761x25519-sha512@openssh.com key_exchange


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3
changelog:
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519 and mlkem768secp256r1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008
changelog:
  - alg_lists: mark MLKEM768 kex experimental
  - openssh, libssh: refactor kx maps to use tuples
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: skip warning on --set=FIPS if bootc
  - update-crypto-policies: don't output FIPS warning in fips mode


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-7
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Ales Matej <amatej@redhat.com> - 4.20.0-21
changelog:
  - autoremove: when a dangling protected dependency is found produce a warning
    and skip it (RHEL-128445)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Pavel Valena <pvalena@redhat.com> - 107-4
changelog:
  - fix(systemd-udevd): handle root=gpt-auto for systemd-v258
  - fix(systemd-repart): allow partition format
  - feat(install.d): do not remove UKIs on remove)
  - fix(dracut.install): remove extraneous quotes in dracut arguments
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
    Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Resolves: RHEL-65061
  - Resolves: RHEL-57504
  - Resolves: RHEL-57492
  - Resolves: RHEL-56750


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-105425


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.3-106
changelog:
  - Add /var/lib/fapolicyd to tmpfiles
  Resolves: RHEL-104873
  - Allow fapolicyd to connect to systemd-machined
  Resolves: RHEL-77071


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-16
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114752


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Frédéric Bérat <fberat@redhat.com> - 2.39-83
changelog:
  - Fix memory leak in freopen, mode flag and wide-oriented stream handling (RHEL-115823)	
  - Add comprehensive tests and document limitations (RHEL-115823)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Alejandro Sáez <asm@redhat.com> - 1.25.3-4
changelog:
  - Cleanup lib/ ownership
  - Remove legacy logic forcing lib/ into golang-tests
  - Move lib/wasm, lib/fips140, and lib/time to main golang package
  - Fixes go_js_wasm_exec availability


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78242


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - New option commit_invalid_mode: Choose what happens when a
    character not in valid input characters is typed
    (Resolves: github-mike-fabian-issue#133)
  - Translation update from Weblate (de 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.3-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.3
  - Add a feature to insert or remove RLM or LRM markers to change the
    direction of a line of bidi text (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/500)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Peter Koprda <pkoprda@redhat.com> - 0:3.10.3-1
changelog:
  - Updates message of the day from Insights to Lightspeed
  - Resolves: RHEL-113967
  - Resolves: RHEL-122146


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.5-1
changelog:
  - Revert "feat: Add parser and spec for compliance_policies_enabled (#4498)"
    (#4534) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.6-1
changelog:
  - fix: revert the cmd&args key for CommandOutputProvider in meta_data (#4539)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-9
changelog:
  - Don't require fips-mode-setup for FIPS status (RHEL-67635)
  - Check for krbLastSuccessfulAuth being enabled (RHEL-84771)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-11
changelog:
  - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
  - Don't rely on order in trust agent/controller role check (RHEL-99532)


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-112752)
    - Check that expected NSS token matches the current FIPS state (RHEL-104144)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
    - Check that allowed_uids in the SSSD config is valid (RHEL-116895)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61276


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-183.el10]
changelog:
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-128456]
  - block: relax atomic write boundary vs chunk size check (Ming Lei) [RHEL-129479]
  - block: fix stacking of atomic writes when atomics are not supported (Ming Lei) [RHEL-129479]
  - block: update validation of atomic writes boundary for stacked devices (Ming Lei) [RHEL-129479]
  - block: use chunk_sectors when evaluating stacked atomic write limits (Ming Lei) [RHEL-129479]
  - block: sanitize chunk_sectors for atomic write limits (Ming Lei) [RHEL-129479]
  - ilog2: add max_pow_of_two_factor() (Ming Lei) [RHEL-129479]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134453] {CVE-2025-40258}
  - x86/CPU/AMD: Extend Zen6 model range (Steve Best) [RHEL-128696]
  - pinctrl: PINCTRL_AMDISP should depend on DRM_AMD_ISP (Steve Best) [RHEL-107607]
  - pinctrl: amd: Clear GPIO debounce for suspend (Steve Best) [RHEL-107607]
  - pinctrl: amd: Constify pointers to 'pinctrl_desc' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix hibernation support with CONFIG_SUSPEND unset (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix use of undeclared identifier 'pinctrl_amd_s2idle_dev_ops' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Add an LPS0 check() callback (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Fix IS_ERR() vs NULL check in probe() (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Add amdisp GPIO pinctrl (Steve Best) [RHEL-107607]
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix two small typos (Steve Best) [RHEL-107607]
  - RDMA/uverbs: Fix umem release in UVERBS_METHOD_CQ_CREATE (Kamal Heib) [RHEL-109943]
  - RDMA/efa: Add CQ with external memory support (Kamal Heib) [RHEL-109943]
  - IB/sa: Fix sa_local_svc_timeout_ms read race (Kamal Heib) [RHEL-109943]
  - RDMA/core: Resolve MAC of next-hop device without ARP support (Kamal Heib) [RHEL-109943]
  - RDMA/cm: Rate limit destroy CM ID timeout error message (Kamal Heib) [RHEL-109943]
  - IB: Extend UVERBS_METHOD_REG_MR to get DMAH (Kamal Heib) [RHEL-109943]
  - RDMA/core: Introduce a DMAH object and its alloc/free APIs (Kamal Heib) [RHEL-109943]
  - IB/core: Add UVERBS_METHOD_REG_MR on the MR object (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add umem "is_contiguous" and "start_dma_addr" helpers (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add a common way to create CQ with umem (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (Kamal Heib) [RHEL-109943]
  - IB/cm: Use separate agent w/o flow control for REP (Kamal Heib) [RHEL-109943]
  - IB/mad: Add flow control for solicited MADs (Kamal Heib) [RHEL-109943]
  - IB/mad: Add state machine to MAD layer (Kamal Heib) [RHEL-109943]
  - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (Kamal Heib) [RHEL-109943]
  - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-109943]
  - RDMA/ipoib: Use parent rdma device net namespace (Kamal Heib) [RHEL-109943]
  - RDMA/core: Extend RDMA device registration to be net namespace aware (Kamal Heib) [RHEL-109943]
  - RDMA/core: reduce stack using in nldev_stat_get_doit() (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq() (Kamal Heib) [RHEL-109943]
  - IB/iser: Remove unnecessary local variable (Kamal Heib) [RHEL-109943]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-184.el10]
changelog:
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140153]
  - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage (Aristeu Rozanski) [RHEL-122951]
  - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages (Aristeu Rozanski) [RHEL-122951]
  - io_uring/net: ensure vectored buffer node import is tied to notification (Jeff Moyer) [RHEL-136780]
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126124]
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-122910]
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Florian Westphal) [RHEL-133467]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-133467]
  - netfilter: nf_nat: remove bogus direction check (Florian Westphal) [RHEL-133467]
  - ipvs: fix ipv4 null-ptr-deref in route error path (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Florian Westphal) [RHEL-133467]
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-133467]
  - netfilter: nft_connlimit: fix possible data race on connection count (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: enable labels for get case too (Florian Westphal) [RHEL-133467]
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack (Florian Westphal) [RHEL-133467]
  - netfilter: nfnetlink: reset nlh pointer during batch replay (Florian Westphal) [RHEL-133467]
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup (Florian Westphal) [RHEL-133467]
  - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable (Florian Westphal) [RHEL-133467]
  - x86/cpu: Add two Intel CPU model numbers (Steve Best) [RHEL-115112]
  - sched/hrtick: Fix hrtick() vs. scheduling context (Phil Auld) [RHEL-124642]
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Phil Auld) [RHEL-124642]
  - sched: Increase sched_tick_remote timeout (Phil Auld) [RHEL-124642]
  - bpf: Make migrate_disable always inline to avoid partial inlining (Phil Auld) [RHEL-124642]
  - sched/fair: Fix pelt lost idle time detection (Phil Auld) [RHEL-124642]
  - sched/deadline: Stop dl_server before CPU goes offline (Phil Auld) [RHEL-124642]
  - sched: Fix some typos in include/linux/preempt.h (Phil Auld) [RHEL-124642]
  - sched: Make migrate_{en,dis}able() inline (Phil Auld) [RHEL-124642]
  - rcu: Replace preempt.h with sched.h in include/linux/rcupdate.h (Phil Auld) [RHEL-124642]
  - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server behaviour (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server getting stuck (Phil Auld) [RHEL-124642]
  - sched: Fix sched_numa_find_nth_cpu() if mask offline (Phil Auld) [RHEL-124642]
  - sched_ext: Add support for cgroup bandwidth control interface (Phil Auld) [RHEL-124642]
  - s390/processor: Use bitop functions for cpu flag helper functions (Phil Auld) [RHEL-124642]
  - s390/asm-offsets: Remove ASM_OFFSETS_C (Phil Auld) [RHEL-124642]
  - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127128]
  - redhat/configs: automotive: enable S32G_WDT (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g399a-rdb3: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g3: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g274-rd2: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g2: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - watchdog: Add the Watchdog Timer for the NXP S32 platform (Jared Kangas) [RHEL-131327]
  - dt-bindings: watchdog: Add NXP Software Watchdog Timer (Jared Kangas) [RHEL-131327]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-126220]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-126220]
  - workqueue: fix texinfodocs warning for WQ_* flags reference (Waiman Long) [RHEL-129577]
  - workqueue: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_unbound_wq with system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Provide a handshake for canceling BH workers (Waiman Long) [RHEL-129577]
  - workqueue: Remove rcu_read_lock/unlock() in wq_watchdog_timer_fn() (Waiman Long) [RHEL-129577]
  - workqueue: Remove redundant rcu_read_lock/unlock() in workqueue_congested() (Waiman Long) [RHEL-129577]
  - workqueue: Use atomic_try_cmpxchg_relaxed() in tryinc_node_nr_active() (Waiman Long) [RHEL-129577]
  - workqueue: Remove unused work_on_cpu_safe (Waiman Long) [RHEL-129577]
  - workqueue: Add new WQ_PERCPU flag (Waiman Long) [RHEL-129577]
  - workqueue: Add system_percpu_wq and system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Basic memory allocation profiling support (Waiman Long) [RHEL-129577]
  - workqueue: fix opencoded cpumask_next_and_wrap() in wq_select_unbound_cpu() (Waiman Long) [RHEL-129577]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-129577]
  - workqueue: fix typo in comment (Waiman Long) [RHEL-129577]
  - workqueue: Fix race condition in wq->stats incrementation (Waiman Long) [RHEL-129577]
  - workqueue: Better document teardown for delayed_work (Waiman Long) [RHEL-129577]
  - cpumask: drop cpumask_next_wrap_old() (Waiman Long) [RHEL-129577]
  - PCI: hv: Switch hv_compose_multi_msi_req_get_cpu() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: rework lpfc_next_{online,present}_cpu() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: switch lpfc_irq_rebalance() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - s390: switch stop_machine_yield() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - padata: switch padata_find_next() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: use cpumask_next_wrap() where appropriate (Waiman Long) [RHEL-129577]
  - cpumask: re-introduce cpumask_next{,_and}_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: deprecate cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - powerpc/xmon: simplify xmon_batch_next_cpu() (Waiman Long) [RHEL-129577]
  - ibmvnic: simplify ibmvnic_set_queue_affinity() (Waiman Long) [RHEL-129577]
  - virtio_net: simplify virtnet_set_affinity() (Waiman Long) [RHEL-129577]
  - objpool: rework objpool_pop() (Waiman Long) [RHEL-129577]
  - cpumask: add for_each_{possible,online}_cpu_wrap (Waiman Long) [RHEL-129577]
  - workqueue: Log additional details when rejecting work (Waiman Long) [RHEL-129577]
  - workqueue: warn if delayed_work is queued to an offlined cpu. (Waiman Long) [RHEL-129577]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-129577]
  - workqueue: Reduce expensive locks for unbound workqueue (Waiman Long) [RHEL-129577]
  - workqueue: Adjust WQ_MAX_ACTIVE from 512 to 2048 (Waiman Long) [RHEL-129577]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128901] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128474] {CVE-2025-40185}
  - redhat/configs: automotive: disable VFIO_PLATFORM (Eric Chanudet) [RHEL-79906]
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78089]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-185.el10]
changelog:
  - net: fix memory leak in skb_segment_list for GRO packets (Mohammad Heib) [RHEL-104436]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Hangbin Liu) [RHEL-133463]
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Hangbin Liu) [RHEL-133463]
  - selftests: fib_tests: add fib6 from ra to static test (Hangbin Liu) [RHEL-133463]
  - ipv6: clear RA flags when adding a static route (Hangbin Liu) [RHEL-133463]
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Hangbin Liu) [RHEL-133463]
  - Documentation: RCU: Wrap kvm-remote.sh rerun snippet in literal code block (Čestmír Kalina) [RHEL-114406]
  - redhat: config: disable RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU,LOG_GP} (Čestmír Kalina) [RHEL-114406]
  - refscale: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay forward-progress testing until boot completes (Čestmír Kalina) [RHEL-114406]
  - torture: Delay CPU-hotplug operations until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay rcutorture readers and writers until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Suppress "Writer stall state" reports during boot (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix jitter.sh spin time (Čestmír Kalina) [RHEL-114406]
  - srcu/tiny: Remove preempt_disable/enable() in srcu_gp_start_if_needed() (Čestmír Kalina) [RHEL-114406]
  - Documentation: Fix RCU typos (Čestmír Kalina) [RHEL-114406]
  - rcu: add rcu_read_lock_dont_migrate() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix racy re-initialization of irq_work causing hangs (Čestmír Kalina) [RHEL-114406]
  - refscale: Check that nreaders and loops multiplication doesn't overflow (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix delayed execution of hurry callbacks (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make BUSTED scenario check and log readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make Trivial RCU ignore onoff_interval and shuffle_interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print number of RCU up/down readers and migrations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for no up/down readers at task level (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for ->up_read() without matching ->down_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain if an ->up_read() is delayed more than 10 seconds (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pull rcu_torture_updown() loop body into new function (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add tests for SRCU up/down reader primitives (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print only one rtort_pipe_count splat (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Start rcu_torture_writer() after rcu_torture_reader() (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh --allmodconfig testing fail on warnings (Čestmír Kalina) [RHEL-114406]
  - torture: Add "ERROR" diagnostic for testing kernel-build output (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh tolerate runs having bad kvm.sh arguments (Čestmír Kalina) [RHEL-114406]
  - torture: Add textid.txt file to --do-allmodconfig and --do-rcu-rust runs (Čestmír Kalina) [RHEL-114406]
  - torture: Extract testid.txt generation to separate script (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress "find" diagnostics from torture.sh --do-none run (Čestmír Kalina) [RHEL-114406]
  - torture: Provide EXPERT Kconfig option for arm64 KCSAN torture.sh runs (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-clocksourcewd on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-rcutasksflavors on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh KCSAN runs set CONFIG_RCU_TORTURE_TEST_CHK_RDR_STATE=y (Čestmír Kalina) [RHEL-114406]
  - torture: Permit multiple space characters in kvm.sh --kconfig argument (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress torture.sh "Zero time" messages for disabled tests (Čestmír Kalina) [RHEL-114406]
  - rcu: Document concurrent quiescent state reporting for offline CPUs (Čestmír Kalina) [RHEL-114406]
  - rcu: Document separation of rcu_state and rnp's gp_seq (Čestmír Kalina) [RHEL-114406]
  - rcu: Document GP init vs hotplug-scan ordering requirements (Čestmír Kalina) [RHEL-114406]
  - rcu: Refactor expedited handling check in rcu_read_unlock_special() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Čestmír Kalina) [RHEL-114406]
  - Documentation/kernel-parameters: Update rcu_normal_wake_from_gp doc (Čestmír Kalina) [RHEL-114406]
  - rcu: Enable rcu_normal_wake_from_gp on small systems (Čestmír Kalina) [RHEL-114406]
  - rcu: Protect ->defer_qs_iw_pending from data race (Čestmír Kalina) [RHEL-114406]
  - rcu: Robustify rcu_is_cpu_rrupt_from_idle() (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Warn on QS requested on dying CPU (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove needless CPU up quiescent state report (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove confusing needless full barrier on task unblock (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Protect against early QS report (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_stall related sysctls into rcu/tree_stall.h (Čestmír Kalina) [RHEL-114406]
  - rcu: Return early if callback is not specified (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Perform more frequent testing of ->gpwrap (Čestmír Kalina) [RHEL-114406]
  - torture: Add testing of RCU's Rust bindings to torture.sh (Čestmír Kalina) [RHEL-114406]
  - torture: Add --do-{,no-}normal to torture.sh (Čestmír Kalina) [RHEL-114406]
  - checkpatch: Deprecate srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Comment invocations of tick_dep_set_task() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make torture.sh --do-rt use CONFIG_PREEMPT_RT (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Split out beginning and end from rcu_torture_one_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check reader-conflict handling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check kernel Kconfig (Čestmír Kalina) [RHEL-114406]
  - srcu: Use rcu_seq_done_exact() for polling API (Čestmír Kalina) [RHEL-114406]
  - rcu: Comment on the extraneous delta test on rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add warning to ensure rcu_seq_done_exact() is working (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace magic number with meaningful constant in rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcuscale: using kcalloc() to relpace kmalloc() (Čestmír Kalina) [RHEL-114406]
  - doc/RCU/listRCU: refine example code for eliminating stale data (Čestmír Kalina) [RHEL-114406]
  - doc: Update LWN RCU API links in whatisRCU.rst (Čestmír Kalina) [RHEL-114406]
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Čestmír Kalina) [RHEL-114406]
  - Revert "rcu/nocb: Fix rcuog wake-up from offline softirq" (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove swake_up_one_online() bandaid (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Always inline rcu_irq_work_resched() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make FORCE_NEED_SRCU_NMI_SAFE depend on RCU_EXPERT (Čestmír Kalina) [RHEL-114406]
  - types: move struct rcuwait into types.h (Čestmír Kalina) [RHEL-114406]
  - torture: Make SRCU lockdep testing use srcu_read_lock_nmisafe() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add FORCE_NEED_SRCU_NMI_SAFE Kconfig for testing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain when invalid SRCU reader_flavor is specified (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Move RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU} to bool (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make cur_ops->format_gp_seqs take buffer length (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ftrace-compatible timestamp to GP# failure/close-call output (Čestmír Kalina) [RHEL-114406]
  - rcu: Trace expedited grace-period numbers in hexadecimal (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand failure/close-call grace-period output (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Include grace-period sequence numbers in failure/close-call (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add a test_boost_holdoff module parameter (Čestmír Kalina) [RHEL-114406]
  - torture: Add get_torture_init_jiffies() for test-start time (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU-fast also be NMI-safe (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_down_read_fast() and srcu_up_read_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Document that srcu_{read_lock,down_read}() can share srcu_struct (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix srcu_read_unlock_{lite,nmisafe}() kernel-doc (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario SRCU-P use srcu_read_lock_fast() (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_fast() support using "srcu-fast" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ability to test srcu_read_{,un}lock_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU-fast readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Move SRCU Tree/Tiny definitions from srcu.h (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull integer-to-pointer conversion into __srcu_ctr_to_ptr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull pointer-to-integer conversion into __srcu_ptr_to_ctr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU_READ_FLAVOR_SLOWGP to flag need for synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_check_read_flavor_lite() to srcu_check_read_flavor_force() (Čestmír Kalina) [RHEL-114406]
  - srcu: Force synchronization for srcu_get_delay() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tree SRCU updates independent of ->srcu_idx (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU readers use ->srcu_ctrs for counter selection (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull ->srcu_{un,}lock_count into a new srcu_ctr structure (Čestmír Kalina) [RHEL-114406]
  - srcu: Use ->srcu_gp_seq for rcutorture reader batch (Čestmír Kalina) [RHEL-114406]
  - srcu: Define SRCU_READ_FLAVOR_ALL in terms of symbols (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tiny SRCU able to operate in preemptible kernels (Čestmír Kalina) [RHEL-114406]
  - rcu: Use _full() API to debug synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcu: Update TREE05.boot to test normal synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Allow a negative value for nfakewriters (Čestmír Kalina) [RHEL-114406]
  - context_tracking: Make RCU watch ct_kernel_exit_state() warning (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Print segment lengths in show_rcu_nocb_gp_state() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove READ_ONCE() for rdp->gpwrap access in __note_gp_changes() (Čestmír Kalina) [RHEL-114406]
  - rcu: Split rcu_report_exp_cpu_mult() mask parameter and use for tracing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE07 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE10 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcu: limit PREEMPT_RCU configurations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update ->extendables check for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update rcutorture_one_extend_check() for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Čestmír Kalina) [RHEL-114406]
  - rcu: handle unstable rdp in rcu_read_unlock_strict() (Čestmír Kalina) [RHEL-114406]
  - sched: update __cond_resched comment about RCU quiescent states (Čestmír Kalina) [RHEL-114406]
  - rcu: rename PREEMPT_AUTO to PREEMPT_LAZY (Čestmír Kalina) [RHEL-114406]
  - rcu: fix header guard for rcu_all_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove references to old grace-period-wait primitives (Čestmír Kalina) [RHEL-114406]
  - rcu: Clarify RCU_LAZY and RCU_LAZY_DEFAULT_OFF help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Add CONFIG_RCU_LAZY delays to call_rcu() kernel-doc header (Čestmír Kalina) [RHEL-114406]
  - srcu: Point call_srcu() to call_rcu() for detailed memory ordering (Čestmír Kalina) [RHEL-114406]
  - rcu: Document self-propagating callbacks (Čestmír Kalina) [RHEL-114406]
  - docs: Improve discussion of this_cpu_ptr(), add raw_cpu_ptr() (Čestmír Kalina) [RHEL-114406]
  - doc: Add broken-timing possibility to stallwarn.rst (Čestmír Kalina) [RHEL-114406]
  - slab: don't batch kvfree_rcu() with SLUB_TINY (Čestmír Kalina) [RHEL-114406]
  - rcu, slab: use a regular callback function for kvfree_rcu (Čestmír Kalina) [RHEL-114406]
  - rcu: remove trace_rcu_kvfree_callback (Čestmír Kalina) [RHEL-114406]
  - slab, rcu: move TINY_RCU variant of kvfree_rcu() to SLAB (Čestmír Kalina) [RHEL-114406]
  - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (Čestmír Kalina) [RHEL-114406]
  - torture: Make kvm-remote.sh give up on unresponsive system (Čestmír Kalina) [RHEL-114406]
  - refscale: Add test for sched_clock() (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove redundant GP sequence checks in srcu_funnel_gp_start (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix typo s/srcu_check_read_flavor()/__srcu_check_read_flavor()/ (Čestmír Kalina) [RHEL-114406]
  - srcu: Guarantee non-negative return value from srcu_read_lock() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use symbols for SRCU reader flavors (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add per-reader-segment preemption diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Read CPU ID for decoration protected by both reader types (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add preempt_count() to rcutorture_one_extend_check() diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add parameters to control polled/conditional wait interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add documentation for recent conditional and polled APIs (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Ignore attempts to test preemption and forward progress (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make rcutorture_one_extend() check reader state (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pretty-print rcutorture reader segments (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add full read-side contexts to "busted" torture type (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with last CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check preemption for failing reader (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ->cond_sync_exp_full function to rcu_ops structure (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use finer-grained timeouts for rcu_torture_writer() polling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make the TREE03 scenario do preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add random real-time preemption (Čestmír Kalina) [RHEL-114406]
  - torture: Add dowarn argument to torture_sched_setaffinity() (Čestmír Kalina) [RHEL-114406]
  - MAINTAINERS: Update RCU git tree (Čestmír Kalina) [RHEL-114406]
  - rcu: Add lockdep_assert_irqs_disabled() to rcu_exp_need_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add KCSAN exclusive-writer assertions for rdp->cpu_no_qs.b.exp (Čestmír Kalina) [RHEL-114406]
  - rcu: Make preemptible rcu_exp_handler() check idempotency (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace open-coded rcu_exp_need_qs() from rcu_exp_handler() with call (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_report_exp_rdp() setting of ->cpu_no_qs.b.exp under lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Make rcu_report_exp_cpu_mult() caller acquire lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Report callbacks enqueued on offline CPU blind spot (Čestmír Kalina) [RHEL-114406]
  - mm/slab: Move kvfree_rcu() into SLAB (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust a shrinker name (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust names passed into trace functions (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Move some functions under CONFIG_TINY_RCU (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Initialize kvfree_rcu() separately (Čestmír Kalina) [RHEL-114406]
  - rculist: add list_bidir_{del,prev}_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcupdate_trace: Define rcu_tasks_trace lock guard (Čestmír Kalina) [RHEL-114406]
  - srcu: Unconditionally record srcu_read_lock_lite() in ->srcu_reader_flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Check for srcu_read_lock_lite() across all CPUs (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove smp_mb() from srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock_lite() kernel-doc comment (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_lite() support using "srcu-lite" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add light-weight SRCU scenario (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add srcu_read_lock_lite() support to rcutorture.reader_flavor (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add reader_flavor parameter for SRCU readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand RCUTORTURE_RDR_MASK_[12] to eight bits (Čestmír Kalina) [RHEL-114406]
  - srcu: Allow inlining of __srcu_read_{,un}lock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Create CPP macros for normal and NMI-safe SRCU readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock{,_nmisafe}() comments (Čestmír Kalina) [RHEL-114406]
  - srcu: Standardize srcu_data pointers to "sdp" and similar (Čestmír Kalina) [RHEL-114406]
  - srcu: Bit manipulation changes for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Renaming in preparation for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Introduce srcu_gp_is_expedited() helper function (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_might_be_idle() to srcu_should_expedite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Replace WARN_ON_ONCE() with BUILD_BUG_ON() if possible (Čestmír Kalina) [RHEL-114406]
  - rcu: Finer-grained grace-period-end checks in rcu_dump_cpu_stacks() (Čestmír Kalina) [RHEL-114406]
  - rcu: Stop stall warning from dumping stacks if grace period ends (Čestmír Kalina) [RHEL-114406]
  - rcu: Delete unused rcu_gp_might_be_stalled() function (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Remove redundant WARN_ON_ONCE() splat (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Avoid printing cpu=-1 for no-fault RCU boost failure (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Add guest_os_delay module parameter (Čestmír Kalina) [RHEL-114406]
  - refscale: Correct affinity check (Čestmír Kalina) [RHEL-114406]
  - torture: Add --no-affinity parameter to kvm.sh (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix missed RCU barrier on deoffloading (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove unused declaration rcu_segcblist_offload() (Čestmír Kalina) [RHEL-114406]
  - rcu/srcutiny: don't return before reenabling preemption (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Remove open-coded one-byte cmpxchg() emulation (Čestmír Kalina) [RHEL-114406]
  - doc: Remove kernel-parameters.txt entry for rcutorture.read_exit (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Test start-poll primitives with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Permit start_poll_synchronize_rcu*() with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Allow short-circuiting of synchronize_rcu_tasks_rude() (Čestmír Kalina) [RHEL-114406]
  - doc: Add rcuog kthreads to kernel-per-CPU-kthreads.rst (Čestmír Kalina) [RHEL-114406]
  - rcu: Add rcuog kthreads to RCU_NOCB_CPU help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Use the BITS_PER_LONG macro (Čestmír Kalina) [RHEL-114406]
  - rcu: Use bitwise instead of arithmetic operator for flags (Čestmír Kalina) [RHEL-114406]
  - doc: rcu: update printed dynticks counter bits (Čestmír Kalina) [RHEL-114406]
  - ext4: fix potential null deref in ext4_mb_init() (Brian Foster) [RHEL-121233]
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect function name in comment (Brian Foster) [RHEL-121233]
  - ext4: use kmalloc_array() for array space allocation (Brian Foster) [RHEL-121233]
  - ext4: fix hole length calculation overflow in non-extent inodes (Brian Foster) [RHEL-121233]
  - ext4: don't try to clear the orphan_present feature block device is r/o (Brian Foster) [RHEL-121233]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-121233]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: remove redundant __GFP_NOWARN (Brian Foster) [RHEL-121233]
  - ext4: fix unused variable warning in ext4_init_new_dir (Brian Foster) [RHEL-121233]
  - ext4: remove useless if check (Brian Foster) [RHEL-121233]
  - ext4: check fast symlink for ea_inode correctly (Brian Foster) [RHEL-121233]
  - ext4: preserve SB_I_VERSION on remount (Brian Foster) [RHEL-121233]
  - ext4: show the default enabled i_version option (Brian Foster) [RHEL-121233]
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Brian Foster) [RHEL-121233]
  - ext4: implement linear-like traversal across order xarrays (Brian Foster) [RHEL-121233]
  - ext4: refactor choose group to scan group (Brian Foster) [RHEL-121233]
  - ext4: convert free groups order lists to xarrays (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_might_prefetch() (Brian Foster) [RHEL-121233]
  - ext4: factor out __ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (Brian Foster) [RHEL-121233]
  - ext4: fix zombie groups in average fragment size lists (Brian Foster) [RHEL-121233]
  - ext4: merge freed extent with existing extents before insertion (Brian Foster) [RHEL-121233]
  - ext4: convert sbi->s_mb_free_pending to atomic_t (Brian Foster) [RHEL-121233]
  - ext4: fix typo in CR_GOAL_LEN_SLOW comment (Brian Foster) [RHEL-121233]
  - ext4: get rid of some obsolete EXT4_MB_HINT flags (Brian Foster) [RHEL-121233]
  - ext4: utilize multiple global goals to reduce contention (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_md_lock on update s_mb_last_group (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_mb_last_start (Brian Foster) [RHEL-121233]
  - ext4: separate stream goal hits from s_bal_goals for better tracking (Brian Foster) [RHEL-121233]
  - ext4: add ext4_try_lock_group() to skip busy groups (Brian Foster) [RHEL-121233]
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Brian Foster) [RHEL-121233]
  - ext4: refactor the inline directory conversion and new directory codepaths (Brian Foster) [RHEL-121233]
  - ext4: use memcpy() instead of strcpy() (Brian Foster) [RHEL-121233]
  - ext4: replace strcmp with direct comparison for '.' and '..' (Brian Foster) [RHEL-121233]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Brian Foster) [RHEL-121233]
  - ext4: fix inode use after free in ext4_end_io_rsv_work() (Brian Foster) [RHEL-121233]
  - ext4: Refactor breaking condition for xattr_find_entry() (Brian Foster) [RHEL-121233]
  - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: replace ext4_writepage_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: reserved credits for one extent during the folio writeback (Brian Foster) [RHEL-121233]
  - ext4: correct the reserved credits for extent conversion (Brian Foster) [RHEL-121233]
  - ext4: enhance tracepoints during the folios writeback (Brian Foster) [RHEL-121233]
  - ext4: restart handle if credits are insufficient during allocating blocks (Brian Foster) [RHEL-121233]
  - ext4: refactor the block allocation process of ext4_page_mkwrite() (Brian Foster) [RHEL-121233]
  - ext4: fix stale data if it bail out of the extents mapping loop (Brian Foster) [RHEL-121233]
  - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (Brian Foster) [RHEL-121233]
  - ext4: process folios writeback in bytes (Brian Foster) [RHEL-121233]
  - ext4: remove unused EXT_STATS macro from ext4_extents.h (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary duplicate check in ext4_map_blocks() (Brian Foster) [RHEL-121233]
  - ext4: remove duplicate check for EXT4_FC_REPLAY (Brian Foster) [RHEL-121233]
  - ext4: Add a WARN_ON_ONCE for querying LAST_IN_LEAF instead (Brian Foster) [RHEL-121233]
  - ext4: Simplify flags in ext4_map_query_blocks() (Brian Foster) [RHEL-121233]
  - ext4: Rename and document EXT4_EX_FILTER to EXT4_EX_QUERY_FILTER (Brian Foster) [RHEL-121233]
  - ext4: Simplify last in leaf check in ext4_map_query_blocks (Brian Foster) [RHEL-121233]
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE (Brian Foster) [RHEL-121233]
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add multi-fsblock atomic write support with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS (Brian Foster) [RHEL-121233]
  - ext4: Make ext4_meta_trans_blocks() non-static for later use (Brian Foster) [RHEL-121233]
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() (Brian Foster) [RHEL-121233]
  - ext4: Document an edge case for overwrites (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_superblock_csum() (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_chksum() (Brian Foster) [RHEL-121233]
  - ext4: remove sb argument from ext4_superblock_csum() (Brian Foster) [RHEL-121233]
  - ext4: remove sbi argument from ext4_chksum() (Brian Foster) [RHEL-121233]
  - ext4: make online defragmentation support large folios (Brian Foster) [RHEL-121233]
  - ext4: make the writeback path support large folios (Brian Foster) [RHEL-121233]
  - ext4: correct the journal credits calculations of allocating blocks (Brian Foster) [RHEL-121233]
  - ext4/jbd2: convert jbd2_journal_blocks_per_page() to support large folio (Brian Foster) [RHEL-121233]
  - ext4: make __ext4_block_zero_page_range() support large folio (Brian Foster) [RHEL-121233]
  - ext4: make regular file's buffered write path support large folios (Brian Foster) [RHEL-121233]
  - ext4: make ext4_mpage_readpages() support large folios (Brian Foster) [RHEL-121233]
  - ext4: ensure i_size is smaller than maxbytes (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_get_maxbytes() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect punch max_end (Brian Foster) [RHEL-121233]
  - ext4: fix out of bounds punch offset (Brian Foster) [RHEL-121233]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Brian Foster) [RHEL-121233]
  - ext4: use writeback_iter in ext4_journalled_submit_inode_data_buffers (Brian Foster) [RHEL-121233]
  - ext4: fix calculation of credits for extent tree modification (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wformat-security warning (Brian Foster) [RHEL-121233]
  - ext4: clairfy the rules for modifying extents (Brian Foster) [RHEL-121233]
  - ext4: check env when mapping and modifying extents (Brian Foster) [RHEL-121233]
  - ext4: introduce ext4_check_map_extents_env() debug helper (Brian Foster) [RHEL-121233]
  - ext4: factor out is_special_ino() (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent fiemap (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-121233]
  - ext4: generalize EXT4_GET_BLOCKS_IO_SUBMIT flag usage (Brian Foster) [RHEL-121233]
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-121233]
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Brian Foster) [RHEL-121233]
  - ext4: hold s_fc_lock while during fast commit (Brian Foster) [RHEL-121233]
  - ext4: convert s_fc_lock to mutex type (Brian Foster) [RHEL-121233]
  - ext4: temporarily elevate commit thread priority (Brian Foster) [RHEL-121233]
  - ext4: update code documentation (Brian Foster) [RHEL-121233]
  - ext4: drop i_fc_updates from inode fc info (Brian Foster) [RHEL-121233]
  - ext4: rework fast commit commit path (Brian Foster) [RHEL-121233]
  - ext4: mark inode dirty before grabbing i_data_sem in ext4_setattr (Brian Foster) [RHEL-121233]
  - ext4: for committing inode, make ext4_fc_track_inode wait (Brian Foster) [RHEL-121233]
  - ext4: convert i_fc_lock to spinlock (Brian Foster) [RHEL-121233]
  - ext4: make block validity check resistent to sb bh corruption (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wflex-array-member-not-at-end warning (Brian Foster) [RHEL-121233]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Brian Foster) [RHEL-121233]
  - ext4: on a remount, only log the ro or r/w state when it has changed (Brian Foster) [RHEL-121233]
  - ext4: correct the error handle in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: Make sb update interval tunable (Brian Foster) [RHEL-121233]
  - ext4: hash: simplify kzalloc(n * 1, ...) to kzalloc(n, ...) (Brian Foster) [RHEL-121233]
  - jbd2: add a missing data flush during file and fs synchronization (Brian Foster) [RHEL-121233]
  - ext4: clear DISCARD flag if device does not support discard (Brian Foster) [RHEL-121233]
  - jbd2: remove jbd2_journal_unfile_buffer() (Brian Foster) [RHEL-121233]
  - ext4: reorder capability check last (Brian Foster) [RHEL-121233]
  - ext4: update the comment about mb_optimize_scan (Brian Foster) [RHEL-121233]
  - jbd2: fix off-by-one while erasing journal (Brian Foster) [RHEL-121233]
  - ext4: remove references to bh->b_page (Brian Foster) [RHEL-121233]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-121233]
  - jbd2: remove redundant function jbd2_journal_has_csum_v2or3_feature (Brian Foster) [RHEL-121233]
  - ext4: remove redundant function ext4_has_metadata_csum (Brian Foster) [RHEL-121233]
  - jbd2: do not try to recover wiped journal (Brian Foster) [RHEL-121233]
  - jbd2: remove wrong sb->s_sequence check (Brian Foster) [RHEL-121233]
  - ext4: verify fast symlink length (Brian Foster) [RHEL-121233]
  - ext4: remove unused input "inode" in ext4_find_dest_de (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration in namei.c (Brian Foster) [RHEL-121233]
  - ext4: add missing brelse() for bh2 in ext4_dx_add_entry() (Brian Foster) [RHEL-121233]
  - jbd2: Correct stale comment of release_buffer_page (Brian Foster) [RHEL-121233]
  - jbd2: correct stale function name in comment (Brian Foster) [RHEL-121233]
  - jbd2: remove stale comment of update_t_max_wait (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of do_readahead (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of jbd2_journal_cancel_revoke (Brian Foster) [RHEL-121233]
  - ext4: show 'shutdown' hint when ext4 is forced to shutdown (Brian Foster) [RHEL-121233]
  - ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Brian Foster) [RHEL-121233]
  - ext4: correct behavior under errors=remount-ro mode (Brian Foster) [RHEL-121233]
  - ext4: add more ext4_emergency_state() checks around sb_rdonly() (Brian Foster) [RHEL-121233]
  - ext4: add ext4_emergency_state() helper function (Brian Foster) [RHEL-121233]
  - ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Brian Foster) [RHEL-121233]
  - ext4: convert EXT4_FLAGS_* defines to enum (Brian Foster) [RHEL-121233]
  - ext4: pack holes in ext4_inode_info (Brian Foster) [RHEL-121233]
  - ext4: remove unused member 'i_unwritten' from 'ext4_inode_info' (Brian Foster) [RHEL-121233]
  - jbd2: drop JBD2_ABORT_ON_SYNCDATA_ERR (Brian Foster) [RHEL-121233]
  - ext4: abort journal on data writeback failure if in data_err=abort mode (Brian Foster) [RHEL-121233]
  - ext4: extract ext4_has_journal_option() from __ext4_fill_super() (Brian Foster) [RHEL-121233]
  - ext4: reject the 'data_err=abort' option in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: do not convert the unwritten extents if data writeback fails (Brian Foster) [RHEL-121233]
  - ext4: replace opencoded ext4_end_io_end() in ext4_put_io_end() (Brian Foster) [RHEL-121233]
  - ext4: fix potential null dereference in ext4 kunit test (Brian Foster) [RHEL-121233]
  - ext4: Refactor out ext4_try_to_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Replace ext4_da_write_inline_data_begin() with ext4_generic_write_inline_data(). (Brian Foster) [RHEL-121233]
  - ext4: Introduce a new helper function ext4_generic_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Don't set EXT4_STATE_MAY_INLINE_DATA for ea inodes (Brian Foster) [RHEL-121233]
  - ext4: Remove a redundant return statement (Brian Foster) [RHEL-121233]
  - ext4: protect ext4_release_dquot against freezing (Brian Foster) [RHEL-121233]
  - ext4: introduce linear search for dentries (Brian Foster) [RHEL-121233]
  - jbd2: Avoid long replay times due to high number or revoke blocks (Brian Foster) [RHEL-121233]
  - ext4: move out common parts into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: move out inode_lock into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_do_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_insert_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_collapse_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_zero_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_punch_hole() (Brian Foster) [RHEL-121233]
  - ext4: don't write back data before punch hole in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: don't explicit update times in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: remove writable userspace mappings before truncating page cache (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration (Brian Foster) [RHEL-121233]
  - jbd2: remove unused transaction->t_private_list (Brian Foster) [RHEL-121233]
  - ext4: remove unused ext4 journal callback (Brian Foster) [RHEL-121233]
  - ext4 fast_commit: make use of name_snapshot primitives (Brian Foster) [RHEL-121233]
  - ext4: use inode_set_cached_link() (Brian Foster) [RHEL-121233]
  - vfs: support caching symlink lengths in inodes (Brian Foster) [RHEL-121233]
  - jbd2: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - ext4: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (Phil Auld) [RHEL-130534]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (Phil Auld) [RHEL-130534]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Anusha Srivatsa) [RHEL-126642]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (Anusha Srivatsa) [RHEL-126642]
  - redhat/configs: Add new configs from DRM 6.18 backport (Anusha Srivatsa) [RHEL-126642]
  - Merge DRM changes from upstream v6.17..v6.18 (Anusha Srivatsa) [RHEL-126642]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-124884]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-186.el10]
changelog:
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139492] {CVE-2025-68301}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139467] {CVE-2025-68305}
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: use modern PM macros (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: add some simple inline functions for !CONFIG_PM (Jared Kangas) [RHEL-138679]
  - mmc: Remove redundant pm_runtime_mark_last_busy() calls (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Drop the use of sdhci_pltfm_free() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Use devm_mmc_alloc_host() helper (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Return void from sdhci_runtime_suspend|resume_host() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: optimize clock loopback selection with dummy pad support (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: refactor clock loopback selection logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix few build warnings (Jared Kangas) [RHEL-138679]
  - mmc: host: sdhci-esdhc-imx: refactor the system PM logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: export APIs for sdhci irq wakeup (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix defined but not used warnings (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: switch standard tuning to manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: verify tuning control status after configuration (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for standard tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: reset async FIFO before sending manual tuning command (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: explicitly reset tuning circuit via RSTT bit (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: calculate data timeout value based on clock (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Save tuning value when card stays powered in suspend (Jared Kangas) [RHEL-138679]
  - mmc: Use of_property_present() for non-boolean properties (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Update esdhc sysctl dtocv bitmask (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Implement emmc hardware reset (Jared Kangas) [RHEL-138679]
  - mmc: host: Fix typos in comments across various files (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (Jared Kangas) [RHEL-138679]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136974] {CVE-2025-40294}
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136953] {CVE-2025-40301}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136839] {CVE-2025-38568}
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116054]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in smb2_open() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in parse_durable_handle_context() (Paulo Alcantara) [RHEL-116054]
  - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix memory leak in get_file_all_info() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB2 PDU size (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB1 PDU size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: rename smb2_get_msg to smb_get_msg (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix to handle removal of rfc1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-116054]
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix buffer validation by including null terminator size in EA length (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove redundant DACL check in smb_check_perm_dacl (Paulo Alcantara) [RHEL-116054]
  - smb: server: defer the initial recv completion logic to smb_direct_negotiate_recv_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: initialize recv_io->cqe.done = recv_done just once (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_RXGK (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116054]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116054]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116054]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116054]
  - smb/server: add comment to FileSystemName of FileFsAttributeInformation (Paulo Alcantara) [RHEL-116054]
  - smb/server: remove unused nterr.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: rename include guard in smb_common.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116054]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116054]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116054]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a tracepoint to log EIO errors (Paulo Alcantara) [RHEL-116054]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116054]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116054]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116054]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116054]
  - cifs: Use netfs_alloc/free_folioq_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116054]
  - ksmbd: ipc: fix use-after-free in ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: server: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116054]
  - ksmbd: vfs: fix race on m_flags in vfs_cache (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Replace strcpy + strcat to improve convert_to_nt_pathname (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - ksmbd: implement error handling for STATUS_INFO_LENGTH_MISMATCH in smb server (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Paulo Alcantara) [RHEL-116054]
  - ksmbd: server: avoid busy polling in accept loop (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116054]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116054]
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Paulo Alcantara) [RHEL-116054]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: update some misguided comment of smb2_0_server_cmds proc (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_oplock_break() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_ioctl() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_query_dir() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_notify() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_read() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix uninit var in afs_alloc_anon_key() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix delayed allocation of a cell's anonymous key (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add the smb3_read_* tracepoints to SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - ksmbd: close accepted socket when per-IP limit rejects connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: rdma: avoid unmapping posted recv on accept failure (Paulo Alcantara) [RHEL-116054]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116054]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable netdevs include IPoIB (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable lower devices when bridge and vlan netdev is used (Paulo Alcantara) [RHEL-116054]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix dynamic lookup to fail on cell lookup failure (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_cm_handler() call ib_drain_qp() after smb_direct_disconnect_rdma_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: call smb_direct_post_recv_credits() when the negotiation is done (Paulo Alcantara) [RHEL-116054]
  - ksmbd: transport_ipc: validate payload size before reading handle (Paulo Alcantara) [RHEL-116054]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116054]
  - smb: server: let free_transport() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116054]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: simplify sibling_list handling in smb_direct_flush_send_list/send_done (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb_direct_disconnect_rdma_connection() already wakes all waiters on error (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: allocate enough space for RW WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a couple of missing smb3_rw_credits tracepoints (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix recursive locking in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible refcount leak in smb2_sess_setup() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible memory leak in smb2_read() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116054]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116054]
  - smb: server: Use common error handling code in smb_direct_rdma_xmit() (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116054]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116054]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116054]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix copy_to_iter return value check (Paulo Alcantara) [RHEL-116054]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116054]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: minor indentation style fix (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116054]
  - ksmbd: increase session and share hash table bits (Paulo Alcantara) [RHEL-116054]
  - ksmbd: replace connection list with hash table (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add an error print when maximum IP connections limit is reached (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add max ip connections parameter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix error code overwriting in smb2_get_info_filesystem() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: copy overlapped range within the same file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use sock_create_kern interface to create kernel socket (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make ksmbd thread names distinct by client IP (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix race condition in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix crypto buffers in non-linear memory (Paulo Alcantara) [RHEL-116054]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_flush_send_list() invalidate a remote key first (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of ib_alloc_cq_any() instead of ib_alloc_cq() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make consitent use of spin_lock_irq{save,restore}() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: let {free_transport,smb_direct_disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_send_negotiate_response() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {enqueue,get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send_data() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to post_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_header() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to calc_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_send_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove unused struct struct smb_direct_transport argument from smb_direct_send_ctx_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{alloc,free}_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_connect() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_accept_client() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_qpair() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_qpair_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_init_params() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_get_max_fr_pages() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{create,destroy}_pools() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {get_free,put}_recvmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: server: implement correct keepalive and timeout handling for smbdirect (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.idle.immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.negotiate_timeout_msec and change to 5s (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass ksmbd_transport to get_smbd_max_read_write_size() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove useless casts from KSMBD_TRANS/SMBD_TRANS (Paulo Alcantara) [RHEL-116054]
  - smb: server: replace smb_trans_direct_transfort() with SMBD_TRANS() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: server: manage recv credits by counting posted recv_io and granted credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: take the recv_credit_target from the negotiate req and always limit the range (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.pending.{count,zero_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: move smb_direct_disconnect_rdma_work() into free_transport() (Paulo Alcantara) [RHEL-116054]
  - smb: server: only turn into SMBDIRECT_SOCKET_CONNECTED when negotiation is done (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: server: queue post_recv_credits_work in put_recvmsg() and avoid count_avail_recvmsg (Paulo Alcantara) [RHEL-116054]
  - smb: server: add a pr_info() when the server starts running (Paulo Alcantara) [RHEL-116054]
  - smb: server: make only use of wake_up[_all]() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: fix IRD/ORD negotiation with the client (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116054]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused struct smbdirect_socket argument of smbd_iter_to_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116054]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116054]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116054]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116054]
  - include/linux/fs.h: add inode_lock_killable() (Paulo Alcantara) [RHEL-116054]
  - netfs: fix reference leak (Paulo Alcantara) [RHEL-116054]
  - afs: Fix potential null pointer dereference in afs_put_server (Paulo Alcantara) [RHEL-116054]
  - smb: server: use disable_work_sync in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't use delayed_work for post_recv_credits_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116054]
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-116054]
  - netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_writev() respect SMB_DIRECT_MAX_SEND_SGES (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix untrusted unsigned subtract (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix unhandled errors in rxgk_verify_packet_integrity() (Paulo Alcantara) [RHEL-116054]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain colons on SMB3.1.1 posix extensions (Paulo Alcantara) [RHEL-116054]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116054]
  - iov_iter: iterate_folioq: fix handling of offset >= folio size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix refcount leak causing resource not released (Paulo Alcantara) [RHEL-116054]
  - ksmbd: extend the connection limiting mechanism to support IPv6 (Paulo Alcantara) [RHEL-116054]
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116054]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-116054]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix extension string in ksmbd_extract_shortname() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: limit repeated connections from clients with the same IP (Paulo Alcantara) [RHEL-116054]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove separate empty_recvmsg_queue (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix corrupted mtime and ctime in smb2_open (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Preauh_HashValue race condition (Paulo Alcantara) [RHEL-116054]
  - ksmbd: check return value of xa_store() in krb5_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference error in generate_encryptionkey (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix to use conn aborts for conn-wide failures (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix transmission of an abort in response to an abort (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix notification vs call-release vs recvmsg (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix recv-recv race of completed call (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix irq-disabled in local_bh_enable() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix bug due to prealloc collision (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix over large frame size warning (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix potential use-after-free in oplock/lease break ack (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of rdma_destroy_qp() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: handle set/get info file for streamed file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in destroy_previous_session (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add free_transport ops in ksmbd connection (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix return from none_validate_challenge() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Paulo Alcantara) [RHEL-116054]
  - ksmbd: provide zero as a unique ID to the Mac client (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove unnecessary softdep on crc32 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use SHA-256 library API instead of crypto_shash API (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Fix change to use SG miter to use offset (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Fix some reference count leaks (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove deadcode (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Set error code in rxgk_yfs_decode_ticket() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxperf: Add test RxGK server keys (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add more CHALLENGE/RESPONSE packet tracing (Paulo Alcantara) [RHEL-116054]
  - afs: Use rxgk RESPONSE to pass token for callback channel (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Display security params in the afs_cb_call tracepoint (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow the app to store private data on peer structs (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement connection rekeying (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement the yfs-rxgk security class (GSSAPI) (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add YFS RxGK (GSSAPI) security class (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add the security index for yfs-rxgk (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow CHALLENGEs to the passed to the app for a RESPONSE (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove some socket lock acquire/release annotations (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Pull out certain app callback funcs into an ops table (Paulo Alcantara) [RHEL-116054]
  - rxrpc: kdoc: Update function descriptions and add link from rxrpc.rst (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix rename failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix stream write failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix UAF in __close_file_table_ids (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent out-of-bounds stream writes by validating *pos (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix memory leak in parse_lease_state() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent rename with empty string (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in session logoff (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in kerberos authentication (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb2pdu: check return value of xa_store() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix the warning from __kernel_write_iter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix dangling pointer in krb_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix overflow in dacloffset bounds check (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix session use-after-free in multichannel connection (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix r_count dec/increment mismatch (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix multichannel connection failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use ib_device_get_netdev() instead of calling ops.get_netdev (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use aead_request_free to match aead_request_alloc (Paulo Alcantara) [RHEL-116054]
  - Revert "ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for create lease context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for durable handle context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make SMB_SERVER_KERBEROS5 enable by default (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Use str_read_write() and str_true_false() helpers (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Use SG miter instead of doing it by hand (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement crypto self-testing (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc8009 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc3962 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide RFC3961 setkey packaging functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to perform requests (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to alloc and prepare a crypto object (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to query the layout of the crypto section (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement Kerberos crypto core (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add some constants out of sunrpc headers (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Test manager data (Paulo Alcantara) [RHEL-116054]
  - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent connection release during oplock break notification (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_free_work_struct (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix bug on trap in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix out-of-bounds in parse_sec_desc() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix integer overflows on 32 bit systems (Paulo Alcantara) [RHEL-116054]
  - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unused functions (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unneeded if check in ksmbd_rdma_capable_netdev() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a missing return value check bug (Paulo Alcantara) [RHEL-116054]
  - ksmbd: conn lock to serialize smb2 negotiate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix broken transfers when exceeding max simultaneous operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: count all requests in req_running counter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: set ATTR_CTIME flags when setting mtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix racy issue from session lookup and expire (Paulo Alcantara) [RHEL-116054]
  - ksmbd: retry iterate_dir in smb2_query_dir (Paulo Alcantara) [RHEL-116054]
  - ksmbd: align aux_payload_buf to avoid OOB reads in cryptographic operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix building with GCC 15 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in SMB request handling (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for pending request during server shutdown (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add netdev-up/down event debug print (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug prints to know what smb2 requests were received (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for rdma capable (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use msleep instaed of schedule_timeout_interruptible() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use __GFP_RETRY_MAYFAIL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix malformed unsupported smb1 negotiate response (Paulo Alcantara) [RHEL-116054]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136261] {CVE-2025-40318}
  - platform/x86: intel-uncore-freq: Add additional client processors (Steve Best) [RHEL-129946]
  - genirq/manage: Reduce priority of forced secondary interrupt handler (Crystal Wood) [RHEL-102562]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Steve Best) [RHEL-129704]
  - selftests: net-drv: stats: sanity check FEC histogram (Mohammad Heib) [RHEL-123858]
  - ethtool: add FEC bins histogram report (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove duplicated mm.o from Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: tsconfig: set command must provide a reply (Mohammad Heib) [RHEL-123858]
  - net: virtio_net: add get_rxrings ethtool callback for RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: use the new helper in rss_set_prep_indir() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Mohammad Heib) [RHEL-123858]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Mohammad Heib) [RHEL-123858]
  - net: ethtool: handle EOPNOTSUPP from ethtool get_ts_info() method (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix wrong type used in struct kernel_ethtool_ts_info (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add test for RSS on flow label (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add rss_api to the Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: support including Flow Label in the flow hash for RSS (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: fix module EEPROM input/output arguments (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: context create and delete tests (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support removing contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support creating contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: move ethtool_rxfh_ctx_alloc() to common code (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out populating response from context (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out allocating memory for response (Mohammad Heib) [RHEL-123858]
  - ethtool: rejig the RSS notification machinery for more types (Mohammad Heib) [RHEL-123858]
  - ethtool: assert that drivers with sym hash are consistent for RSS contexts (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test input-xfrm and hash fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting flow hashing fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting input-xfrm via Netlink (Mohammad Heib) [RHEL-123858]
  - netlink: specs: define input-xfrm enum in the spec (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting hashing key via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hkey via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hfunc via Netlink (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting indirection table via Netlink (Mohammad Heib) [RHEL-123858]
  - tools: ynl: support packing binary arrays of scalars (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: factor out checking min queue count (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: initial RSS_SET (indirection table handling) (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS header field configuration (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: report which fields are configured for hashing (Mohammad Heib) [RHEL-123858]
  - ethtool: mark ETHER_FLOW as usable for Rx hash (Mohammad Heib) [RHEL-123858]
  - tools: ynl: decode enums in auto-ints (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: make sure dump takes the rss lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: reduce indent for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the compat code for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: mlx5: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: ice: drop the dead code related to rss_contexts (Mohammad Heib) [RHEL-123858]
  - eth: otx2: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix leaking netdev ref if ethnl_default_parse() failed (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move get_rxfh callback under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move rxfh_fields callbacks under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: take rss_lock for all rxfh changes (Mohammad Heib) [RHEL-123858]
  - net: ethtool: avoid OOB accesses in PAUSE_SET (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: replace underscores with dashes in names (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS Netlink notifications (Mohammad Heib) [RHEL-123858]
  - doc: ethtool: mark ETHTOOL_GRXFHINDIR as reimplemented (Mohammad Heib) [RHEL-123858]
  - net: ethtool: rss: add notifications (Mohammad Heib) [RHEL-123858]
  - net: ethtool: copy req_info from SET to NTF (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the data argument from ethtool_notify() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: call .parse_request for SET handlers (Mohammad Heib) [RHEL-123858]
  - net: ethtool: dynamically allocate full req size req (Mohammad Heib) [RHEL-123858]
  - netlink: specs: add the multicast group name to spec (Mohammad Heib) [RHEL-123858]
  - eth: Update rmon hist range (Mohammad Heib) [RHEL-123858]
  - net: Add support for providing the PTP hardware source in tsinfo (Mohammad Heib) [RHEL-123858]
  - net: ethtool: netlink: Use netdev_hold for dumpit() operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: phy: Convert the PHY_GET command to generic phy dump (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Introduce per-PHY DUMP operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Mohammad Heib) [RHEL-123858]
  - net: freescale: use ethtool string helpers (Mohammad Heib) [RHEL-123858]
  - compiler_types: Introduce __nonstring_array (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix get_ts_stats() documentation (Mohammad Heib) [RHEL-123858]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-187.el10]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-140732]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-111046]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95660]
  - ipv4: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (Hangbin Liu) [RHEL-128993]
  - tcp_metrics: use dst_dev_net_rcu() (Hangbin Liu) [RHEL-128993]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129089] {CVE-2025-40170}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128993] {CVE-2025-40158}
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129028] {CVE-2025-40135}
  - ipv6: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128993]
  - ipv6: mcast: Add ip6_mc_find_idev() helper (Hangbin Liu) [RHEL-128993]
  - net: ipv4: guard ip_mr_output() with rcu (Hangbin Liu) [RHEL-128993]
  - net: ipv4: Add ip_mr_output() (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: Split ipmr_queue_xmit() in two (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: ipmr_queue_xmit(): Drop local variable `dev' (Hangbin Liu) [RHEL-128993]
  - RDMA/irdma: avoid invalid read in irdma_net_event (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix irdma_alloc_ucontext_resp padding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SRQ shadow area address initialization (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove doorbell elision logic (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not set IBK_LOCAL_DMA_LKEY for GEN3+ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add missing mutex destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SIGBUS in AEQ destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add a missing kfree of struct irdma_pci_f for GEN2 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_free_pble (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove redundant NULL check of udata in irdma_create_user_ah() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused CQ registry (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Take a lock before moving SRQ tail in poll_cq (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: CQ size and shadow update changes for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Silently consume unsignaled completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Initialize cqp_cmds_info to prevent resource leaks (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Enforce local fence for LOCAL_INV WRs (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix vf_id size to u16 to avoid overflow (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Set irdma_cq cq_num field during CQ create (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SD index calculation (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused struct irdma_cq fields (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix positive vs negative error codes in irdma_post_send() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Update Kconfig (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend CQE Error and Flush Handling for GEN3 Devices (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add Atomic Operations support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Restrict Memory Window and CQE Timestamping to GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add SRQ support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Support 64-byte CQEs and GEN3 CQE opcode decoding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add support for V2 HMC resource management scheme (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend QP context programming for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 virtual QP1 support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Introduce GEN3 vPort driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 HW statistics support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 support for AEQ and CEQ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 CQP support with deferred completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Discover and set up GEN3 hardware register layout (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 core driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Refactor GEN2 auxiliary driver (Kamal Heib) [RHEL-99206]
  - ice, irdma: fix an off by one in error handling code (Kamal Heib) [RHEL-99206]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Switch to using the crc32c library (Kamal Heib) [RHEL-99206]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-188.el10]
changelog:
  - arm64: dts: freescale: Add GMAC Ethernet for S32G2 EVB and RDB2 and S32G3 RDB3 (CKI Backport Bot) [RHEL-141789]
  - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() (Jared Kangas) [RHEL-136697]
  - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc (Jared Kangas) [RHEL-136697]
  - pinctrl: s32: add missing pins definitions (Jared Kangas) [RHEL-136697]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-189.el10]
changelog:
  - selftests/mm: skip hugepage-mremap test if userfaultfd unavailable (Chunyu Hu) [RHEL-112331]
  - selftests/mm: skip thuge-gen test if system is not setup properly (Chunyu Hu) [RHEL-112331]
  - selftests/mm: use generic read_sysfs in thuge-gen test (Chunyu Hu) [RHEL-112331]
  - selftests/mm: extract read_sysfs and write_sysfs into vm_util (Chunyu Hu) [RHEL-112331]
  - selftests/mm: deduplicate default page size test results in thuge-gen (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix thuge-gen test name uniqueness (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix child process exit codes in ksm_functional_tests (Chunyu Hu) [RHEL-112331]
  - selftest/mm: fix ksm_funtional_test failures (Chunyu Hu) [RHEL-112331]
  - selftests/mm: add support to test 4PB VA on PPC64 (Chunyu Hu) [RHEL-112331]
  - mm/selftests: fix incorrect pointer being passed to mark_range() (Chunyu Hu) [RHEL-112331]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-190.el10]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137767]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137767]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137767] {CVE-2025-38576}
  - sched: Fix build for modules using set_tsk_need_resched() (Phil Auld) [RHEL-134848]
  - sched: Export hidden tracepoints to modules (Phil Auld) [RHEL-134848]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132906] {CVE-2023-53034}
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (CKI Backport Bot) [RHEL-132754]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115483]
  - KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115483]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-115483]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-191.el10]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-88203]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138039] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137853]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137103] {CVE-2025-40271}
  - net: netdevsim: fix inconsistent carrier state after link/unlink (Xin Long) [RHEL-130765]
  - selftests: Add napi threaded busy poll test in `busy_poller` (Xin Long) [RHEL-130765]
  - net: Extend NAPI threaded polling to allow kthread based busy polling (Xin Long) [RHEL-130765]
  - netdevsim: set the carrier when the device goes up (Xin Long) [RHEL-130765]
  - net: Use NAPI_* in test_bit when stopping napi kthread (Xin Long) [RHEL-130765]
  - docs: remove obsolete description about threaded NAPI (Xin Long) [RHEL-130765]
  - net: prevent deadlocks when enabling NAPIs with mixed kthread config (Xin Long) [RHEL-130765]
  - selftests: drv-net: don't assume device has only 2 queues (Xin Long) [RHEL-130765]
  - selftests: drv-net: test the napi init state (Xin Long) [RHEL-130765]
  - net: update NAPI threaded config even for disabled NAPIs (Xin Long) [RHEL-130765]
  - net: Update threaded state in napi config in netif_set_threaded (Xin Long) [RHEL-130765]
  - net: define an enum for the napi threaded state (Xin Long) [RHEL-130765]
  - net: Use netif_threaded_enable instead of netif_set_threaded in drivers (Xin Long) [RHEL-130765]
  - net: Create separate gro_flush_normal function (Xin Long) [RHEL-130765]
  - net: s/dev_set_threaded/netif_set_threaded/ (Xin Long) [RHEL-130765]
  - Add support to set NAPI threaded for individual NAPI (Xin Long) [RHEL-130765]
  - net: stop napi kthreads when THREADED napi is disabled (Xin Long) [RHEL-130765]
  - net: gro: expose GRO init/cleanup to use outside of NAPI (Xin Long) [RHEL-130765]
  - net: gro: decouple GRO from the NAPI layer (Xin Long) [RHEL-130765]
  - netdevsim: support NAPI config (Xin Long) [RHEL-130765]
  - selftests: net: cleanup busy_poller.c (Xin Long) [RHEL-130765]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-131892]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-131892]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-131892]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix incorrect speed reported by debugfs (Maxim Levitsky) [RHEL-131892]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-131892]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-131892]
  - net: mana: Remove redundant netdev_lock_ops_to_full() calls (Maxim Levitsky) [RHEL-131892]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-131892]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add speed support in mana_get_link_ksettings (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add support for net_shaper_ops (Maxim Levitsky) [RHEL-131892]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129117] {CVE-2025-40154}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-192.el10]
changelog:
  - ima: Access decompressed kernel module to verify appended signature (Coiby Xu) [RHEL-104353]
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (John Meneghini) [RHEL-96459]
  - qede: convert to use ndo_hwtstamp callbacks (John Meneghini) [RHEL-96459]
  - bnx2x: convert to use ndo_hwtstamp callbacks (John Meneghini) [RHEL-96459]
  - net: qed: Remove redundant NULL checks after list_first_entry() (John Meneghini) [RHEL-96459]
  - qed: Don't collect too many protection override GRC elements (John Meneghini) [RHEL-96459]
  - net: qed: reduce stack usage for TLV processing (John Meneghini) [RHEL-96459]
  - net: qede: Initialize qede_ll_ops with designated initializer (John Meneghini) [RHEL-96459]
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_db_recovery_dp (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_print_mcp_trace_* (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_ptt_invalidate (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_calc_*_ctx_validation functions (John Meneghini) [RHEL-96459]
  - qed: Remove unused qed_memset_*ctx functions (John Meneghini) [RHEL-96459]
  - net: bnx2x: use ethtool string helpers (John Meneghini) [RHEL-96459]
  - net: tls: Cancel RX async resync request on rcd_delta overflow (CKI Backport Bot) [RHEL-133478]
  - net: tls: Change async resync helpers argument (CKI Backport Bot) [RHEL-133478]
  - selftests: tls: add test for short splice due to full skmsg (CKI Backport Bot) [RHEL-133478]
  - selftests: net: tls: add tests for cmsg vs MSG_MORE (CKI Backport Bot) [RHEL-133478]
  - tls: don't rely on tx_work during send() (CKI Backport Bot) [RHEL-133478]
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-133478]
  - tls: always set record_type in tls_process_cmsg (CKI Backport Bot) [RHEL-133478]
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (CKI Backport Bot) [RHEL-133478]
  - tls: trim encrypted message to match the plaintext on short splice (CKI Backport Bot) [RHEL-133478]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137688] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136947] {CVE-2025-40322}
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-39991}
  - wifi: ath: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Convert mt76_wed_rro_ind to LE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Add SW path for HW-RRO v3.1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable WED for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132586] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - net: mediatek: wed: Introduce MT7992 WED support to MT7988 SoC (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132586]
  - perf tools: Fix build error on generated/fs_at_flags_array.c (Anubhav Shelat) [RHEL-127734]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-193.el10]
changelog:
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118173]
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136529]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136529]
  - x86/sev/docs: Document the SNP Reverse Map Table (RMP) (John Allen) [RHEL-69735]
  - x86/sev: Add full support for a segmented RMP table (John Allen) [RHEL-69735]
  - x86/sev: Treat the contiguous RMP table as a single RMP segment (John Allen) [RHEL-69735]
  - x86/sev: Map only the RMP table entries instead of the full RMP range (John Allen) [RHEL-69735]
  - x86/sev: Move the SNP probe routine out of the way (John Allen) [RHEL-69735]
  - x86/sev: Require the RMPREAD instruction after Zen4 (John Allen) [RHEL-69735]
  - x86/sev: Add support for the RMPREAD instruction (John Allen) [RHEL-69735]
  - x86/sev: Prepare for using the RMPREAD instruction to access the RMP (John Allen) [RHEL-69735]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-194.el10]
changelog:
  - redhat: exclude DERIVATE_BUILD and DERIVATE_VERSION from self-test/data (Jan Stancek)
  - mm/page_alloc: change all pageblocks migrate type on coalescing (Audra Mitchell) [RHEL-115319] {CVE-2025-71134}
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141497]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141497]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141497]
  - printk: Allow printk_trigger_flush() to flush all types (Derek Barbosa) [RHEL-141497]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141497]
  - exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-137410]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (Steve Best) [RHEL-95624]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Steve Best) [RHEL-129400]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (Steve Best) [RHEL-129400]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (Steve Best) [RHEL-129400]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (Steve Best) [RHEL-129400]
  - efi: stmm: Drop unneeded null pointer check (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Drop unused EFI error from setup_mm_hdr arguments (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Do not return EFI_OUT_OF_RESOURCES on internal errors (Lenny Szubowicz) [RHEL-129401]
  - efi: stmm: Fix incorrect buffer allocation method (Lenny Szubowicz) [RHEL-129401]
  - efistub: Lower default log level (Lenny Szubowicz) [RHEL-129401]
  - x86/sev: Let sev_es_efi_map_ghcbs() map the CA pages too (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: use 'targets' instead of extra-y in Makefile (Lenny Szubowicz) [RHEL-129401]
  - include: pe.h: Fix PE definitions (Lenny Szubowicz) [RHEL-129401]
  - efi/efi_test: Fix missing pending status update in getwakeuptime (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Lenny Szubowicz) [RHEL-129401]
  - efi: Improve logging around memmap init (Lenny Szubowicz) [RHEL-129401]
  - efi: Export symbol efi_mem_desc_lookup (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the EFI mixed mode startup code back under arch/x86, into startup/ (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the 5-level paging trampoline into /startup (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/compressed: Merge the local pgtable.h include into <asm/boot.h> (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/sev: Support memory acceptance in the EFI stub under SVSM (Lenny Szubowicz) [RHEL-129401]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Remove cper_cxl.h (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Make definitions and structures global (Lenny Szubowicz) [RHEL-129401]
  - efi/cper, cxl: Prefix protocol error struct and function names with cxl_ (Lenny Szubowicz) [RHEL-129401]
  - efi: rci2: mark bin_attribute as __ro_after_init (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid legacy decompressor zlib/zstd wrappers (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid CopyMem/SetMem EFI services after ExitBootServices (Lenny Szubowicz) [RHEL-129401]
  - efi: efibc: change kmalloc(size * count, ...) to kmalloc_array() (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Move mixed mode startup code into libstub (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Simplify and document thunking logic (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Remove dependency on legacy startup_32 code (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Set up 1:1 mapping of lower 4GiB in the stub (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Factor out and clean up long mode entry (Lenny Szubowicz) [RHEL-129401]
  - x86/efi/mixed: Check CPU compatibility without relying on verify_cpu() (Lenny Szubowicz) [RHEL-129401]
  - x86/efistub: Merge PE and handover entrypoints (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Move the LA57 trampoline to separate source file (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Work around broken busybox 'truncate' tool (Lenny Szubowicz) [RHEL-129401]
  - x86 boot build: make git ignore stale 'tools' directory (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Add back some padding for the CRC-32 checksum (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Drop CRC-32 checksum and the build tool that generates it (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Avoid physical address 0x0 when doing random allocation (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Sanitize boot params before parsing command line (Lenny Szubowicz) [RHEL-129401]
  - efi/mokvar-table: Avoid repeated map/unmap of the same page (Lenny Szubowicz) [RHEL-129401]
  - efi: Don't map the entire mokvar table to determine its size (Lenny Szubowicz) [RHEL-129401]
  - efi/cper: Fix cper_arm_ctx_info alignment (Lenny Szubowicz) [RHEL-129401]
  - efi/cper: Fix cper_ia_proc_ctx alignment (Lenny Szubowicz) [RHEL-129401]
  - efi: Use BIT_ULL() constants for memory attributes (Lenny Szubowicz) [RHEL-129401]
  - efi: Avoid cold plugged memory for placing the kernel (Lenny Szubowicz) [RHEL-129401]
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: skip memattr table on kexec boot (Lenny Szubowicz) [RHEL-129401]
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Lenny Szubowicz) [RHEL-129401]
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use __free() helper for pool deallocations (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use cleanup helpers for freeing copies of the memory map (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Simplify PCI I/O handle buffer traversal (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Refactor and clean up GOP resolution picker code (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Simplify GOP handling code (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Use C99-style for loop to traverse handle buffer (Lenny Szubowicz) [RHEL-129401]
  - x86/efistub: Drop long obsolete UGA support (Lenny Szubowicz) [RHEL-129401]
  - efi/esrt: remove esre_attribute::store() (Lenny Szubowicz) [RHEL-129401]
  - efi/zboot: Limit compression options to GZIP and ZSTD (Lenny Szubowicz) [RHEL-129401]
  - efi: Fix memory leak in efivar_ssdt_load (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Take command line overrides into account for loaded files (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Fix command line fallback handling when loading files (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Parse builtin command line after bootloader provided one (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: Apply EFI Memory Attributes after kexec (Lenny Szubowicz) [RHEL-129401]
  - x86/efi: Drop support for the EFI_PROPERTIES_TABLE (Lenny Szubowicz) [RHEL-129401]
  - efi/memattr: Ignore table if the size is clearly bogus (Lenny Szubowicz) [RHEL-129401]
  - efi/zboot: Fix outdated comment about using LoadImage/StartImage (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: Free correct pointer on failure (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: measure initrd to PCR9 independent of source (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: remove unnecessary cmd_line_len from efi_convert_cmdline() (Lenny Szubowicz) [RHEL-129401]
  - efi/libstub: fix efi_parse_options() ignoring the default command line (Lenny Szubowicz) [RHEL-129401]
  - perf vendor events arm64: Fix typo in Ampere eMag json file (Charles Mirabile) [RHEL-122933]
  - perf vendor events AmpereOneX: Fix spelling typo in the metrics file (Charles Mirabile) [RHEL-122933]
  - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches (Charles Mirabile) [RHEL-122933]
  - perf vendor events arm64 AmpereOne: Fix typos in metrics' descriptions (Charles Mirabile) [RHEL-122933]


