# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Viktor Ashirov <vashirov@redhat.com> - 3.3.0-1
changelog:
  - Bump version to 3.3.0
  - Resolves: RHEL-58681 - high wtime can hide a worker reading a large
    requests
  - Resolves: RHEL-62876 - Inconsistencies in the log messages
  - Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
    "nsslapd-changelogmaxage"
  - Resolves: RHEL-76836 - Crash in replica_config_add when manually
    configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
    information in offline mode
  - Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
    large values in internal op
  - Resolves: RHEL-86325 - dbscan utility not filtering using -k option
  - Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
    associated config
  - Resolves: RHEL-109505 - Possible memory leak when using the Retro
    Changelog plugin.
  - Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
  - Resolves: RHEL-118811 - Password policy can be created even though the
    same one already exists
  - Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
  - Resolves: RHEL-121119 - Differences on export ldif using online of off-
    line method on RHDS
  - Resolves: RHEL-121169 - dsctl should report error when the ldif to import
    doesn't have permissions to be read by dirsrv.
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-129597 - Remediate "Could not read password attribute"
    error on directory Servers with chaining enabled(DBLink)
  - Resolves: RHEL-132767 - An online reinitialization with LMDB is
    terminating the receiving server
  - Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
    malformed controls and/or override critical controls from clients
  - Resolves: RHEL-138569 - AddressSanitizer: SEGV
    ldap/servers/plugins/automember/automember.c:1962 in
    automember_mod_post_op
  - Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
  - Resolves: RHEL-141049 - Fail open condition in ACL
  - Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
  - Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
    recommendations when there is more than 1 LDAP backend
  - Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
    SIGSEGV in ns-slapd
  - Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
    threads
  - Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
  - Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
    extension
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-154374 - Prevent the ability of creating a replication
    agreement from a node back to itself is needed
  - Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
  - Resolves: RHEL-157894 - Online export is failing when using the option
    "-s"
  - Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
    index_read_ext_allids
  - Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
    SubIDs
  - Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
  - Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
    search operations
  - Resolves: RHEL-170643 - passwordbadwords attribute of the local password
    policy is not functioning
  - Resolves: RHEL-170907 - Substring index produces empty results and can
    crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  - Resolves: RHEL-172228 - Replacing a group's member list modifies users
    who were already members
  - Resolves: RHEL-174908 - Replication errors in logs
  - Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
    data loss


author: Simon Pichugin <spichugi@redhat.com> - 3.3.0-2
changelog:
  - Bump version to 3.3.0-2
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-182463 - Error: NssSsl.add_cert() got an unexpected
    keyword argument 'input_file'
  - Resolves: RHEL-166737 - import_monitor_threads and average rate
    214748364.8/sec rate calculation issue
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-164610 - Online reinitialization is failing with the
    supplier being busy calling idrange_add_id()
  - Resolves: RHEL-153094 - [RFE] Thread pool state mmap file with dsctl and
    cn=monitor exposure
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-185139 - Compressed logs are prematurely deleted
  - Resolves: RHEL-183383 - Post-import cache autotuning does not recompute
    entry cache size
  - Resolves: RHEL-190780 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
    pointer dereference in defer control plugin BER parser [rhel-10.3]
  - Resolves: RHEL-183109 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
    overflow in SASL packet length bypasses size limit leading to heap buffer
    overflow [rhel-10.3]


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Ján Václav <jvaclav@redhat.com> - 1:1.56.1-1
changelog:
  - Update to 1.56.1
  - fix handling onlink route flag for ECMP routes (RHEL-1402)
  - Add Geneve support (RHEL-122042)
  - Add support for persistently un/managing devices (RHEL-142555)


author: Josephine Pfeiffer <josie@redhat.com> - 1:1.58~rc1-1
changelog:
  - Update to 1.58-rc1 release
  - Add IPv6-mostly support with CLAT via a BPF program (RHEL-93551)
  - Keep permissive modify.system polkit defaults for RHEL 10 minor compatibility
  - Warn about gateways that are not directly reachable (RHEL-126543)
  - Fix suppressing DHCPv6 DNS servers with ipv6.ignore-auto-dns on reapply (RHEL-149149)
  - Fix sending DHCP release on bridge interfaces (RHEL-126455)
  - Allow selecting from available devices when creating profiles in nmtui (RHEL-129186)
  - Fix AVC error when running NetworkManager --print-config as systemd service (RHEL-140113)
  - Fix invalid default value of the bond arp_missed_max option (RHEL-182559)
  - Fix RPM scriptlet dependencies for udev-less container installs


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-4
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-35963]
  - Resolves: RHEL-35963
    ([Azure][WALA] Consider to disable Log collector [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-7
changelog:
  - wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
  - Resolves: RHEL-46713
    ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-9
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
  - Resolves: RHEL-68796
    (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-10
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
  - Resolves: RHEL-84073
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.13.1.1-2
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
  - Resolves: RHEL-109465
    ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
  - Resolves: RHEL-96792
    ([Azure][WALA][RHEL-10] Missing man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
  - Resolves: RHEL-114155
    ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243]
  - Resolves: RHEL-82243
    ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules)


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.1
changelog:
  RHEL 10.1 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108928


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-6
changelog:
  - Add aide-migrate-config to automate config migration from pre-0.19 syntax
  Resolves: RHEL-178837
  - Re-add syslog_format config option dropped during rebase to 0.19.2


author: Patrik Koncity <pkoncity@redhat.com> - 0.19.2-7
changelog:
  - Support for included files in /etc/aide.d/
  Resolves: RHEL-141673
  - Increase default values for num_workers
  Resolves: RHEL-141678
  - Add pre-configured systemd timer for aide check
  Resolves: RHEL-123520


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250812-19
changelog:
  - Update linux-firmware to latest upstream (RHEL-108921)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates for various ASICs
  - panthor: Add firmware for more Mali GPUs
  - amdgpu: update renoir firmware
  - amdgpu: add SMU 14.0.3 kicker firmware
  - amdgpu: add PSP 14.0.3 firmware
  - amdgpu: add GC 12.0.1 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SDMA 7.0.1 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update SDMA 7.0.0 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - amdgpu: Update GCN 4.0.5 microcode
  - amdgpu: Update SDMA 6.1.0 microcode
  - amdgpu: Update GC 11.5.0 microcode
  - qcom: Add QDU100 firmware image files required for booting.
  - linux-firmware: Add firmware for airoha-npu driver
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - linux-firmware: Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: update dmcub fw for dcn314
  - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  - cirrus: cs35l41: Update Firmware for Dell Oasis
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - amdgpu: update dmcub fw for various DCN version
  - WHENCE: extract more license statements
  - WHENCE: clarify io_ti origin
  - amdgpu: Update GC 11.5.1 microcode
  - rtw89: 8852b: update fw to v0.29.128.0
  - rtw89: 8852bt: update fw to v0.29.127.0
  - rtw89: 8922a: add regd fw element with version R72-R6
  - rtw89: 8852c: add regd fw element with version R72-R57
  - rtw89: 8922a: update BB parameter V49
  - qcom: Update gpu firmwares of QCS615 chipset
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  Resolves: RHEL-108921


author: Denys Vlasenko <dvlasenk@redhat.com> - 20251111-20
changelog:
  - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
  - AMDGPU: Update firmware for Strix Halo (RHEL-104078)
  - AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
  - Update linux-firmware to latest upstream
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - Revert "rtw89: 8852b: update fw to v0.29.128.0"
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - rtw89: 8852bt: update fw to v0.29.122.1
  - Revert "rtw89: 8852bt: update fw to v0.29.127.0"
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - linux-firmware: Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7920 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443
  - Revert "linux-firmware: update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: Xe2LPD DMC v2.29
  - i915: Xe3LPD DMC v2.32
  - i915: Xe3LPD_3002 DMC v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - linux-firmware: Add ISH firmware file for Intel Pather Lake platform
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - WHENCE: extract multitech license text
  - WHENCE: extract ueagle license
  - WHENCE: use LICENCE.sensoray for s2255drv
  - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
  - WHENCE: clean up emi62 and yam license statements
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - linux-firmware: ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - amdgpu: DMCUB updates for various ASICs
  - mediatek: mtk_wed: drop links for mt7988
  - Revert "amdgpu: update gc 10.3.6 firmware"
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - amdgpu: DMCUB updates for various ASICs
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location
  - amdgpu: update PSP 14.0.3 kicker firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update SMU 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - intel_vpu: Update NPU firmware
  - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
  - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - amdgpu: Update ISP FW for isp v4.1.1
  - Update README.md to clarify S-o-b requirements
  - firmware: qcom: Reorder VPU firmware entries in WHENCE
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l41: Move entries to correct driver section in WHENCE
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - amdgpu: DMCUB updates for various ASICs
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  Resolves: RHEL-117675, RHEL-104078, RHEL-107606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260107-21
changelog:
  - Update linux-firmware to latest upstream (RHEL-119866)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - linux-firmware: add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - linux-firmware: update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - linux-firmware: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150 GPU
  - qcom: Add firmwares for sm8450 GPU
  - qcom: Add firmwares for sm8550 GPU
  - qcom: Add firmwares for sm8650 GPU
  - qcom: Add firmwares for sm8750 GPU
  - Makefile: add licence header
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - linux-firmware: Update amd-ucode copyright information
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - WHENCE: fix version string for video firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update smu 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992
  - mt76: update firmware for MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - linux-firmware: Update AMD cpu microcode
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  Resolves: RHEL-119866


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260130-22
changelog:
  - Update linux-firmware to latest upstream (RHEL-145527)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - linux-firmware: Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc FW for core102-56 release
  - iwlwifi: Add Hr/Gf firmware for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - linux-firmware: update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - linux-firmware: update firmware for MT7920 WiFi device
  Resolves: RHEL-145527


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260508-23
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - amdgpu: update SMU 14.0.3 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 4.4.4 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update SDMA 4.4.5 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update renoir firmware
  - amdgpu: update aldebaran firmware
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - amdgpu: DMCUB updates for various ASICs
  - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - linux-firmware: update firmware for MT7925 WiFi device
  - Revert "linux-firmware: Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - linux-firmware: Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
  - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
  - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - WHENCE: Move Dell remoteproc firmware to correct section
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc FW for core103-40 release
  - iwlwifi: Add Hr/Gf firmware for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - linux-firmware: add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: update firmware for qat_402xx devices
  - linux-firmware: update firmware for qat_420xx devices
  - linux-firmware: update firmware for an8811hb 2.5G ethernet phy
  - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
  - linux-firmware: update firmware for MT7920 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Quasar core
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - linux-firmware: update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - linux-firmware: add firmware for Lontium LT8713SX DP hub
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - linux-firmware: update firmware for MT7902 BT device
  - linux-firmware: update firmware for MT7902 WiFi device
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - amdgpu: DMCUB updates for various ASICs
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
  - Bluetooth: Add symbolic links for Intel Solar firmware variants
  - Bluetooth: Add symbolic links for Intel Pulsar firmware variants
  - Bluetooth: Add symbolic links for Intel AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - linux-firmware: Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - WHENCE: Correct 2 trailing whitespaces
  - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - linux-firmware: Add Dell ISH firmware for Intel panther lake systems
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-154363


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260624-24
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nxp: add firmware for IW61x WiFi device
  - mediatek MT7922: update bluetooth firmware to 20260605203811
  - mediatek MT7925: update bluetooth firmware to 20260605184935
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add LPAICP firmware for shikra platform
  - qcom: Add qdsp6sw firmware for shikra platform
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7996
  - linux-firmware: update firmware for MT7992
  - linux-firmware: update firmware for MT7990
  - qcom: Update ADSP firmware for Kaanapali platform
  - qcom: update ADSP firmware for glymur platform
  - qcom: update CDSP firmware for glymur platform
  - QCA: Add bluetooth firmware nvm files for USI/NFA725B
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - qcom: update ADSP firmware for qcs615 platform
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
  - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
  - realtek: rt1321: Update the patch code to v1.10
  - amdgpu: DMCUB updates for various ASICs
  - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
  - qcom: update CDSP firmware for shikra platform
  - qcom: Update ADSP firmware for Glymur platform
  - Remove any files with unknown licenses
  - AGENTS.md, README: address second round of MR review
  - README: document AI assisted contribution convention
  - AGENTS.md: clarify areas raised in MR review
  - Add AGENTS.md for AI coding agents
  - LICENSES: update GPL-2.0 text and references
  - LICENSES: rename GPL-3 to GPL-3.0-only
  - LICENSES: rename Apache-2 to Apache-2.0
  - Move firmware licenses to a LICENSES/ directory
  - qcom: update ADSP firmware for sm8750 platform
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
  - qcom: Update DSP firmware for qcs8300 platform
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: Update DMCUB fw for DCN314
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert vangogh VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - amdgpu: revert beige_goby VCN firmware
  - qcom: update CDSP firmware for x1e80100 platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
  - linux-firmware: Add RCA firmware files for tas257x projects
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
  - QCA: Add BCS calibration binary for QCC2072
  - QCA: Update Bluetooth firmware for QCC2072 UART interface
  - amdgpu: DMCUB updates for various ASICs
  - rtl_nic: add firmware rtl8261c.bin for RTL8261c
  - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
  - i915: Xe3LPD DMC v2.36
  - i915: Xe3LPD_3002 DMC v2.31
  - i915: Xe3p_LPD DMC v2.37
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - qcom: Add gpu firmwares for Shikra chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - rtw89: 8852b: update fw to v0.29.29.18
  - rtw89: 8852bt: update fw to v0.29.122.2
  - amdgpu: Update gc 11.0.1 microcode
  - ASoC: tas2783: Add Firmware files for tas2783A projects
  - linux-firmware: add firmware for MT7927 WiFi device
  - Add HP ISH firmware for Intel Panther Lake systems
  - ti: Add PCM6240 firmware with multiple audio profiles support
  - qcom: add CDSP firmware for shikra platform
  - amdgpu: DMCUB updates for various ASICs
  - qcom: update ADSP firmware for x1e80100 platform
  - lt*_fw.bin: move to Lontium subdir
  - qcom: Add cdsp1r.jsn for sa8775p platform
  - amdgpu: rembrandt DMCUB v4.0.74.0
  Resolves: RHEL-154363


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260722-25
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: add ADSP firmware for hawi platform
  - powervr: add firmware for Imagination Technologies BXM-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform
  - xe: Release GuC firmware for NVL-S
  - cirrus: cs35l56: Update firmware for the ASUS UX5406SA
  - qcom: vpu: add Gen2 firmware binary for Purwa
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
  - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
  - iwlwifi: add Bz/Sc FW for core24.60-33 release
  - iwlwifi: Add Hr/Gf firmware for core24.60-33 release
  - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
  - docs: address feedback on LICENSE-CRITERIA.md
  - Adjust statement on existing firmware
  - docs: add LICENSE-CRITERIA.md as project licensing policy
  - ueagle-atm: sadly drop unlicensed files
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware for new projects
  - rtw89: 8852a: add TX power track R34
  - linux-firmware: Update AMD SEV firmware
  Resolves: RHEL-154363


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.47-1
changelog:
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101789
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Resolves: RHEL-173441
  - Refactor remaining X timeout references (mkolman)
    Resolves: RHEL-173441
  - Set RHSM machine name based on user provided hostname (mkolman)
    Resolves: RHEL-149198


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.50-1
changelog:
  - dracut: append anchor certs to CA bundle in initramfs (rvykydal)
    Resolves: RHEL-77154
  - security: add --type support for %certificate section (rvykydal)
    Resolves: RHEL-77154


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.51-1
changelog:
  - gui: disable overlay scrolling on disk selection lists (k.koukiou)
    Resolves: RHEL-69902
  - fix: use static string for tmux status line to reduce CPU usage (k.koukiou)
    Resolves: RHEL-180821
  - fix: improve error when enabling missing services on target (k.koukiou)
    Related: RHEL-61134
  - fix: check if service is installed before enabling in kickstart (k.koukiou)
    Resolves: RHEL-61134
  - storage: check disk space in cmdline mode before starting installation
    (rvykydal)
    Resolves: RHEL-142734


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.53-1
changelog:
  - Revert "fix: persist checkisomd5 media verification output in the journal"
    (k.koukiou)
    Related: RHEL-73812
  - fix: persist checkisomd5 media verification output in the journal (k.koukiou)
    Resolves: RHEL-73812
  - fix: allow enabling socket and other systemd units via kickstart (k.koukiou)
    Related: RHEL-61134


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.54-1
changelog:
  - modules: rpm_ostree: fix bootc install when /boot is on root partition
    (k.koukiou)
    Resolves: RHEL-147437
  - fix(bootc): show bootc error output in the installation error dialog
    (bciconel)
    Resolves: RHEL-162832
  - flatpak: honor %packages --ignoremissing (bciconel)
    Related: RHEL-101748
  - flatpak: surface errors when requested flatpaks cannot be installed
    (bciconel)
    Resolves: RHEL-101748


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Nick Clifton <nickc@redhat.com> - 13.10-1
changelog:
  - Rebuild against LLVM 22.  (RHEL-140399)
  - Require C++17 for building.
  - Annocheck: Ignore Risc-V attribute sections.
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.


author: Nick Clifton <nickc@redhat.com> - 13.12-1
changelog:
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.  (RHEL-170885)
  - Annocheck: Look for compromising characters in pathnames.


author: Nick Clifton <nickc@redhat.com> - 13.15-1
changelog:
  - Annocheck: LTO test: Add exceptions for Clang runtime support object files.  (RHEL-176052)
  - Annocheck: Do not complain about GO binaries that do not support branch protection.
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.


author: Nick Clifton <nickc@redhat.com> - 13.20-1
changelog:
  - Annocheck: Add support for ZIP files and TAR balls.
  - Testsuite: Fixes for the glibcxx and hardening tests.
  - GCC Plugin: Fix several minor bugs.
  - Annocheck: Fix several minor bugs.
  - Testsuite: Fix discrepancies.
  - GCC Plugin: Fix recording the setting of __GLIBCXX_ASSERTIONS.
  - Annocheck: Add exceptions for kernel bootstrap tools.  (RHEL-73522)
  - Testsuite: Add new tests.


author: Nick Clifton <nickc@redhat.com> - 13.22-1
changelog:
  - Annocheck: Enable stack-clash test for Risc-V binaries built by gcc-15+.
  - LLVM & Clang Plugins: Build with -fexceptions enabled.  (RHEL-184482)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-68490
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68468
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69315


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-101356


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106152


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-2
changelog:
  - Bump version to get automation to do builds and create an erratum
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.4-1
changelog:
  - Update to latest upstream version 1.7.4
  - Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.5-1
changelog:
  - Resolves: RHEL-192801 - Rebase ansible-collection-redhat-leapp to 1.7.5
  - Resolves: RHEL-194092 - Reflect changes in leapp report keys in the infra.leapp mappings for remediations


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release (RHEL-69036)
  - Add back ansible-test subpackage and drop doc subpackage
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging) (RHEL-59076)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content) (RHEL-69034)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release (RHEL-69763)
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core) (RHEL-66996)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35566
  - Convert input certificates
    Resolves: RHEL-44616
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40870


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67567
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61433


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67567
  - Fix requirements for ansible-core
    Resolves: RHEL-68648


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67567
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40228
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-70023
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68441
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70021
  - Collection: No more role module duplication
    Resolves: RHEL-71124


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67567
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78229


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104653
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92890
  - Provide compatibility for AAH naming
    Resolves: RHEL-89438
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-95104
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78635


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104653
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106560


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139147
  - Add suppport for passkey management
    Resolves: RHEL-139258
  - Add suppport for sysaccount management
    Resolves: RHEL-140600
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140606


author: Thomas Woerner <twoerner@redhat.com> - 1.17.0-1
changelog:
  - Update to version 1.17.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.17.0
    Resolves: RHEL-214144
  - New ipauser query state
    Resolves: RHEL-214148
  - New ipagroup query state
    Resolves: RHEL-214150


author: Maxwell G <gotmax@e.email> - 2.2.7-2
changelog:
  - BuildRequire ansible-packaging on Fedora
  - Resolves: rhbz#2126889
  - Fix inverted conditionals and build/install the collection using ansible-galaxy
  - Keep ansible-lint disabled for now
  - Remove unnecessary macros
  - Exclude files with galaxy.yml build_ignore


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.12
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121558


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced in 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Jerome Marchand <jmarchan@redhat.com> - 0.36.1-1
changelog:
  - Rebase to version 0.36.1 (RHEL-162980)
  - Rebuild with LLVM 22 (RHEL-140402)
  - Fix multiple failure introduced by BPF 6.19 update (RHEL-174797)
  - Fix klockstat (RHEL-174798)
  - Fix bpf-cpufreq (RHEL-93855)      
  - Fix bpf-syncsnoop (RHEL-93854)
  - Fix tcpaccept (RHEL-93424)
  - Fix filegone, kvmexit, netqtop and tcpconnect on s390x (RHEL-75515)
  - Fix profile on s390x (RHEL-68950)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-17
changelog:
  - Do not remove PVs from devices file if disabled or doesn't exist
    Resolves: RHEL-65846
  - iscsi: Use node.startup=onboot option for Login
    Resolves: RHEL-53719
  - tests: Make sure selinux_test doesn't try to create mountpoints
    Resolves: RHEL-78988


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-18
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74076
  - Include additional information in PartitioningError
    Resolves: RHEL-84686


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-19
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-84685
    Resolves: RHEL-84663


author: Vojtech Trefny <vtrefny@redhat.com> - 3.13.0-3
changelog:
  - iSCSI: don't crash when LUN ID >= 256
    Resolves: RHEL-122305
  - Remove the safe_dbus module
    Related: RHEL-122305


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Release 1.13.0
  - Update to bootc 1.13.0
  - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
    rebuild in install environment (workaround for upstream Makefile issue)
  - Package shell completions (bash, zsh, fish)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.0-8
changelog:
  - Accept output_buffer_limit as an alias for max_output_length
    in Decompressor.process() for forward compatibility with upstream 1.2.0
  - Resolves: RHEL-221151


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Jon Maloy <jmaloy@redhat.com> - 5.0.1-7
changelog:
  - Fix CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-141553
  - Fix CVE-2025-68114 (memory corruption)
    Resolves: RHEL-137749


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121729
  - Added channel binding support
  - resolves: RHEL-103400


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-16
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54372]
  - Resolves: RHEL-54372
    ([RHEL10]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-17
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54688]
  - Resolves: RHEL-54688
    ([RHEL 10.0] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-19
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016]
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019]
  - Resolves: RHEL-65016
    (Configuring metric for default gateway is not working [rhel-10])
  - Resolves: RHEL-65019
    (NoCloud - network_config bridges incorrectly configured [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-6
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
  - Resolves: RHEL-128097
    ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7.el10_2.1
changelog:
  - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159033]
  - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159033]
  - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159033]
  - Resolves: RHEL-159033
    ([GSS][Secure Support] [RHEL-10] cloud-init requests lease before DHCP can provide one [rhel-10.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jindrich Novy <jnovy@redhat.com> - 4:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Resolves: RHEL-85671


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 4:2.246.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0
  - Resolves: RHEL-143694


author: Jindrich Novy <jnovy@redhat.com> - 4:2.247.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0
  - Resolves: RHEL-135340


author: Jindrich Novy <jnovy@redhat.com> - 4:2.250.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.250.0
  - Resolves: RHEL-212010


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.62.0-2
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-7.el10
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:0.64.0-5
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 6:6.0-1
changelog:
  - bump to container_libs_branch podman-6.0
  - use RHEL-specific mounts.conf from common/contrib/redhat/ (container-libs#842)
  - move config files from /etc/containers to /usr/share/containers (vendor defaults)
  - add vendor drop-in configs for containers.conf, storage.conf and registries.conf
  - add %posttrans scriptlet to preserve user config on upgrade
  - add Conflicts: podman < 5:6, buildah < 2:1.44, skopeo < 1:1.23
  - own /etc/containers/networks directory
  - Resolves: RHEL-189270


author: Jindrich Novy <jnovy@redhat.com> - 6:6.0-2
changelog:
  - fix broken rootless storage.conf mount option (metacopy=on conflicts with
    userxattr) - split storage vendor config into separate rootful and rootless
    drop-in files - Resolves: RHEL-191669


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163803
  - Resolves: RHEL-163824

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: David Malcolm <dmalcolm@redhat.com> - 14.4.1-2
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
  	fortran/125998, middle-end/126084, rtl-optimization/125173,
  	target/67459, target/105116, target/106895, target/116597,
  	target/119210, target/122948, target/124908, target/125818,
  	target/125972, target/126049, tree-optimization/120201,
  	tree-optimization/126257, tree-optimization/126262


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Christopher Lusk <clusk@redhat.com> - 4.2-4
changelog:
  - Fix full RELRO: patch nmk build.mk to preserve -Wl flags for gcc-linked targets
  - Resolves: RHEL-152222


author: Adrian Reber <areber@redhat.com> - 4.2-6
changelog:
  - Apply patch to fix RHEL-189245 RHEL-189246 RHEL-189248
  - Resolves: RHEL-189245
  - Resolves: RHEL-189246
  - Resolves: RHEL-189248


author: Čestmír Kalina <ckalina@redhat.com> - 4.2-9
changelog:
  - replace ELFDATA2LSB with BORD in has_elf_identity (checkpoint-restore/criu#3059)
  - Resolves: RHEL-180600


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Jindrich Novy <jnovy@redhat.com> - 1.27-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.27
  - add conditional Requires on container-selinux for SELinux-enabled systems
  - Resolves: RHEL-164639
  - Resolves: RHEL-169517


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240807-1.git7ea320f
changelog:
  - fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
changelog:
  - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - LEGACY: drop cipher@pkcs12 = SEED-CBC
  - fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  - nss: be stricter with new purposes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
changelog:
  - TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
  - openssh: remove sntrup761x25519-sha512@openssh.com key_exchange


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3
changelog:
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519 and mlkem768secp256r1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008
changelog:
  - alg_lists: mark MLKEM768 kex experimental
  - openssh, libssh: refactor kx maps to use tuples
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: skip warning on --set=FIPS if bootc
  - update-crypto-policies: don't output FIPS warning in fips mode


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158207)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@redhat.com> - 5.3-2
changelog:
  - New upstream 5.3 release
  - Drop release gpg key, unsupported by gpgverify.
  - Drop all local patches
  - Add debugedit-5.3-elflint-test.patch
  - Add gcc-c++ as BuildRequires
  - Add gdb as BuildRequires
  - Install debugedit-classify-ar and man page


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Archana <aravinda@redhat.com> - 1.26.1-2
changelog:
  - Rebuild with latest Go Resolves: RHEL-166313 Resolves: RHEL-167511
    Resolves: RHEL-167355 Resolves: RHEL-177139


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Ales Matej <amatej@redhat.com> - 4.20.0-21
changelog:
  - autoremove: when a dangling protected dependency is found produce a warning
    and skip it (RHEL-128445)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Petr Menšík <pemensik@redhat.com> - 2.90-7
changelog:
  - Prevent overflow in extract_name function (CVE-2026-2291)
  - Prevent DoS in DNSSEC validation (CVE-2026-4890)
  - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
  - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
  - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
  - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Pavel Valena <pvalena@redhat.com> - 107-4
changelog:
  - fix(systemd-udevd): handle root=gpt-auto for systemd-v258
  - fix(systemd-repart): allow partition format
  - feat(install.d): do not remove UKIs on remove)
  - fix(dracut.install): remove extraneous quotes in dracut arguments
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
    Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571


author: Pavel Valena <pvalena@redhat.com> - 107-7
changelog:
  - fix(base): escape arguments in initqueue hook script generation
  - fix(net-lib): warn on suspicious shell metacharacters in hostname file
  - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  - fix(network-legacy): remove network-legacy completely from the codebase
  - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
    Resolves: RHEL-170845


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
changelog:
  - Rebase to edk2-stable202508 [RHEL-111718]
  - Resolves: RHEL-111718
    ([edk2,rhel-10] rebase to edk2-stable202508)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
changelog:
  - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
  - Resolves: RHEL-109548
    ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
changelog:
  - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
  - Resolves: RHEL-115880
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-4
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
  - Resolves: RHEL-126085
    ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-5
changelog:
  - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
  - Resolves: RHEL-150696
    (edk2: Add JSON descriptors for uefi-vars builds)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-1
changelog:
  - Rebase to edk2-stable202602 [RHEL-151719]
  - Resolves: RHEL-151719
    ([edk2,rhel-10] rebase to edk2-stable202602)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-2
changelog:
  - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161575]
  - Resolves: RHEL-161575
    (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-3
changelog:
  - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182419]
  - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165726]
  - Resolves: RHEL-182419
    (edk2/x64: re-enable legacy kernel loader)
  - Resolves: RHEL-165726
    (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-4
changelog:
  - edk2-Revert-MdeModulePkg-PciBusDxe-Degrade-MEM64-to-PMEM6.patch [RHEL-188305]
  - Resolves: RHEL-188305
    ([edk2,rhel-10] Unable to allocate PCI BAR with edk2-20260221-1.el10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-5
changelog:
  - edk2-update-dbx-to-20260630-v1.6.5.patch [RHEL-193127]
  - Resolves: RHEL-193127
    ([edk2] update dbx database to release 1.6.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-6
changelog:
  - edk2-OvmfPkg-EmuVariableFvbRuntimeDxe-fix-ValidateFvHeade.patch [RHEL-220548]
  - Resolves: RHEL-220548
    ([RHEL 10.3] TDX Secure Boot Setup Mode with OVMF.inteltdx.secboot.fd)


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-zero-sh_addr.patch
    elfutils-0.194-alloc-jobs.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Resolves: RHEL-65061
  - Resolves: RHEL-57504
  - Resolves: RHEL-57492
  - Resolves: RHEL-56750


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-16
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114752


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-24
changelog:
  - bundled pyasn1: replace with dependency to fix CVE-2026-30922
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-157188, RHEL-155669


author: Arslan Ahmad <arahmad@redhat.com> - 4.16.0-29
changelog:
  - fence_openstack: fix list-action to avoid timeout when
    there are 100+ VMs on the hypervisor
    Resolves: RHEL-155007


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Jan Grulich <jgrulich@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0
    Resolves: RHEL-126038
    Resolves: RHEL-92123
    Resolves: RHEL-165631
    Resolves: RHEL-170158


author: Jan Grulich <jgrulich@redhat.com> - 1.4.7-1
changelog:
  - Update to 1.4.7
    Resolves: RHEL-126427
  - Make flatpak-builder to use fusermount3
    Resolves: RHEL-72576
  - Disable %check


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
    Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
    Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Marek Polacek <polacek@redhat.com> 16.1.1-4
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/18205, ada/125695, c/124303, c/124532, c/124985, c/125252,
  	c++/65271, c++/113563, c++/115314, c++/117259, c++/121094, c++/123536,
  	c++/124584, c++/124978, c++/125007, c++/125123, c++/125135,
  	c++/125284, c++/125333, c++/125334, c++/125376, c++/125378,
  	c++/125384, c++/125408, c++/125412, c++/125423, c++/125454,
  	c++/125490, c++/125498, c++/125745, c++/125759, c++/125764,
  	c++/125768, c++/125770, c++/125889, c++/125900, c++/125939,
  	fortran/60576, fortran/105582, fortran/106546, fortran/115260,
  	fortran/125021, fortran/125051, fortran/125391, fortran/125393,
  	fortran/125416, fortran/125430, fortran/125481, fortran/125527,
  	fortran/125528, fortran/125529, fortran/125530, fortran/125531,
  	fortran/125534, fortran/125535, fortran/125606, fortran/125650,
  	fortran/125669, fortran/125902, fortran/126018, ipa/125699,
  	libstdc++/71301, libstdc++/78302, libstdc++/118158, libstdc++/125228,
  	libstdc++/125312, libstdc++/125369, libstdc++/125374,
  	libstdc++/125450, libstdc++/125890, libstdc++/125956,
  	middle-end/125156, middle-end/125621, middle-end/125977, other/125348,
  	rtl-optimization/125173, rtl-optimization/125375, target/106895,
  	target/120144, target/120870, target/122665, target/122827,
  	target/124870, target/124895, target/124908, target/125148,
  	target/125215, target/125320, target/125351, target/125355,
  	target/125362, target/125373, target/125409, target/125448,
  	target/125469, target/125478, target/125611, target/125628,
  	target/125670, target/125751, target/125752, target/125795,
  	target/125818, target/125838, target/125883, target/125949,
  	target/125972, target/125992, tree-optimization/124151,
  	tree-optimization/125250, tree-optimization/125291,
  	tree-optimization/125419, tree-optimization/125431,
  	tree-optimization/125477, tree-optimization/125501,
  	tree-optimization/125502, tree-optimization/125545,
  	tree-optimization/125553, tree-optimization/125646,
  	tree-optimization/125652, tree-optimization/125686,
  	tree-optimization/125774, tree-optimization/125776
  - don't remove openacc tests for s390x and ppc64le (RHEL-181820)


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 8bd08ee92c4 and cd289df068e to address
    rhbz2366461.  These backports will not be needed once we rebase to
    GDB 18.


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport upstream commit ef7727ae from Tom de Vries to
    fix the test suite for newer Tcl releases.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport the following upstream commits in order to address RHBZ
    2467251: d980317c7f1, 958d06262a7, 7d1d7386561, 8915de0883c,
    8f65ab7b71f.  These commits will all drop out when we rebase to GDB
    18.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Applied proposed patch "[gdb/testsuite, Tcl 9] Fix EILSEQ problems for
    UTF8 related tests".  This is required in order to complete a build
    with testing.


author: Michal Kolar <mkolar@redhat.com>
changelog:
  - Rebase to FSF GDB 17.2.
    Deleted: gdb-rhbz2435950-skip-revert.patch
    Backport e492fb22b70, gdb: backport DAP core file support
    Replace manual, multi-file patch inclusion with modern autosetup
    Add rpminspect.yaml to define package-specific testing policy


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Adjust commit message in gdb-backport-dap-core-file-support.patch to
    remove '---' string which confuses git.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit be3a9405ceb4d6d6 to fix and issue with the
    D demangler (RHBZ 2368350).  This commit will drop out when we
    rebase to GDB 18.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 93f536d813c41527 to fix RHBZ 2498034.  This
    commit will drop out when we rebase to GDB 18.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Florian Weimer <fweimer@redhat.com> - 2.39-120
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-151554)
  - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
  - resolv: Check hostname for validity (CVE-2026-4438)
  - resolv: Count records correctly (CVE-2026-4437)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Jakub Jelen <jjelen@redhat.com> - 2.4.5-5
changelog:
  - Make profile scripts more robust (RHEL-166369)
  - Add compatibility provides for new Fedora source verification (RHEL-142310)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
changelog:
  - Fix 3.8.13 CVEs and security issues, update Makefile.in
  - Fix CVE-2026-33846
  - Fix CVE-2026-42009
  - Fix CVE-2026-33845
  - Fix CVE-2026-42010
  - Fix CVE-2026-3833
  - Fix CVE-2026-42011
  - Fix CVE-2026-42012
  - Fix CVE-2026-42013
  - Fix CVE-2026-42014
  - Fix CVE-2026-5260
  - Fix CVE-2026-42015
  - Fix CVE-2026-3832
  - Fix CVE-2026-5419
  - Fix upstream security issue #1808
  - Fix upstream security issue #1810
  - Fix upstream security issue #1813
  - Fix upstream security issue #1818
  - Fix upstream security issue #1818
  - Fix upstream security issue #1819
  - Fix upstream security issue #1822
  - Fix upstream security issue #1841
  - Fix upstream security issue #1823
  - Fix upstream security issue #1817
  - Fix upstream security issue #1820
  - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in


author: Alejandro Sáez <asm@redhat.com> - 1.25.3-4
changelog:
  - Cleanup lib/ ownership
  - Remove legacy logic forcing lib/ into golang-tests
  - Move lib/wasm, lib/fips140, and lib/time to main golang package
  - Fixes go_js_wasm_exec availability


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-26
changelog:
  - Resolves RHEL-161792: CVE-2026-27877
  - Resolves RHEL-166318: CVE-2026-33810
  - Resolves RHEL-166490: CVE-2026-32282
  - Resolves RHEL-167360: CVE-2026-32280
  - Resolves RHEL-167516: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> 12.4.3-2
changelog:
  - Resolves RHEL-183692: CVE-2026-39821
  - Resolves RHEL-188283: Remove Lua ExclusiveArch macro for Konflux build


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Sam Feifer <sfeifer@redhat.com> - 5.3.0-5
changelog:
  - Resolves RHEL-166319: CVE-2026-33810
  - Resolves RHEL-166491: CVE-2026-32282
  - Resolves RHEL-167361: CVE-2026-32280
  - Resolves RHEL-167517: CVE-2026-32283


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78242


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-7
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-9
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955
  - Expose XFS version in virt-filesystems
    resolves: RHEL-144074


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.8-1
changelog:
  - Rebase to guestfs-tools 1.55.8
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.9-1
changelog:
  - Rebase to guestfs-tools 1.55.9
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706, RHEL-170708


author: Richard W.M. Jones <rjones@redhat.com> - 1.56.0-1
changelog:
  - Rebase to guestfs-tools 1.56.0
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706, RHEL-170708


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Christophe Fergeau <cfergeau@redhat.com> - 6:0.8.7-2
changelog:
  - rebuild for CVE-2025-68121, CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
  - Resolves: RHEL-140518
  - Resolves: RHEL-145414
  - Resolves: RHEL-146723
  - Resolves: RHEL-146928
  - Resolves: RHEL-149248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.23.12-11
changelog:
  - CVE-2026-8632 hplip: HPLIP: Privilege escalation and arbitrary code execution
    via operating system command injection [rhel-10.3]
  - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
    via integer overflow in hpcups [rhel-10.3]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-14
changelog:
  - Resolves: RHEL-173559 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
    code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175064 - httpd: NULL pointer dereference can cause a child
    process crash (CVE-2026-33007)
  - Resolves: RHEL-175087 - httpd: off-by-one out-of-bounds reads in AJP getter
    functions (CVE-2026-33857)
  - Resolves: RHEL-175044 - httpd: heap-based buffer over-read due to missing
    null-termination check (CVE-2026-34032)
  - Resolves: RHEL-175060 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.51.20220731git
changelog:
  - hpvd-hv-hv_kvp_daemon-Update-to-v6.16.patch [RHEL-185419]
  - Resolves: RHEL-185419
    (Hyper-V host fails to display guest IP address in certain network configurations [rhel-10])


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - New option commit_invalid_mode: Choose what happens when a
    character not in valid input characters is typed
    (Resolves: github-mike-fabian-issue#133)
  - Translation update from Weblate (de 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.3-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.3
  - Add a feature to insert or remove RLM or LRM markers to change the
    direction of a line of bidi text (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/500)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Peter Koprda <pkoprda@redhat.com> - 0:3.10.3-1
changelog:
  - Updates message of the day from Insights to Lightspeed
  - Resolves: RHEL-113967
  - Resolves: RHEL-122146


author: Peter Schrimpel <pschrimp@redhat.com> - 0:3.10.4-1
changelog:
  - Switch Meson build system for Makefile
  - Remove six dependency
  - Resolves: RHEL-143989
  - Resolves: RHEL-147443


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.5-1
changelog:
  - Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
  - feat: Malware Detection wildcards support and fix concurrent scan false
    positives (#4746) (63891960+mtclinton@users.noreply.github.com)
  - chore(pre-commit): update and add new hook conventional-pre-commit
    (xiangceliu@redhat.com)
  - chore(build): enable packit building for release branch
    (xiangceliu@redhat.com)
  - feat: add all rules scanned to malware detection upload (#4735)
    (63891960+mtclinton@users.noreply.github.com)
  - fix(data-processing): fix unpredictable behavior of --context (#4740)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
  - fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
    core-selinux (xiangceliu@redhat.com)
  - feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
  - chore(spec): New spec "podman system info --json" for data analysis
    (huali@redhat.com)
  - chore(manifests): remove/merge remained useless components (#4747)
    (xiangceliu@redhat.com)
  - chore(manifests): use the base module instead of component (#4730)
    (xiangceliu@redhat.com)
  - chore: add egg_release back to collection with a condition (#4729)
    (xiangceliu@redhat.com)
  - fix(build): prepare the filters.yaml before setting up  (#4745)
    (xiangceliu@redhat.com)
  - chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
  - chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
    (xiangceliu@redhat.com)
  - chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
  - chore(test): don't pass context when root is passed to initialize_broker
    (#4720) (xiangceliu@redhat.com)
  - chore: update PR template and remove RPM/Egg delivery guide (#4723)
    (xiangceliu@redhat.com)
  - feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
    (#4705) (44796653+huali027@users.noreply.github.com)
  - feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
    (44796653+huali027@users.noreply.github.com)
  - fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
  - feat: add CoreEgg/CoreRpm to identify current collector (#4724)
    (xiangceliu@redhat.com)


author: Jaylin Zhou <zzhou@redhat.com> 3.7.6-1
changelog:
  - fix: add retry for fetching tailoring file (#4768)
    (33912805+LightOfHeaven1994@users.noreply.github.com)
  - Add new spec sys_block_queue_discard_max_bytes (#4766) (986222045@qq.com)


author: Ping Qin <piqin@redhat.com> 3.7.7-1
changelog:
  - feat: Add new datasource spec azure_instance_compute_metadata (#4772)
    (30404410+qinpingli@users.noreply.github.com)


author: Ping Qin <piqin@redhat.com> 3.7.8-1
changelog:
  - feat: New spec "podman ps --all --no-trunc --size --format=json" 
    (#4790) (30404410+qinpingli@users.noreply.github.com)
  - feat: Add new spec thp_shmem_enabled (#4789)
    (30404410+qinpingli@users.noreply.github.com)
  - fix(RHINENG-22265): Fix broken documentation links in code-comments 
    (#4788) (30404410+qinpingli@users.noreply.github.com)
  - feat: add spec and parser for mdadm_detail_platform (RHINENG-27037) 
    (#4787) (30404410+qinpingli@users.noreply.github.com)


author: Ping Qin <piqin@redhat.com> 3.8.0-1
changelog:
  - feat: exclude insights.client.apps module from rpm building
    (30404410+qinpingli@users.noreply.github.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.2-1
changelog:
  - Resolves: RHEL-178898 Rebase ipa to latest version for RHEL 10.3
  - Resolves: RHEL-179217 ipa-migrate tool is renaming host records & host info in automount information
  - Resolves: RHEL-178538 [Cursor Automated] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-174346 Release Modern UI progress to RHEL 10.3
  - Resolves: RHEL-153857 ipa-migrate doesn't properly handle replication conflicts
  - Resolves: RHEL-153852 ipa-migrate doesn't migrate IPA locations
  - Resolves: RHEL-151578 Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts
  - Resolves: RHEL-151326 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy)
  - Resolves: RHEL-147173 ipa-migrate doesn't process users' sshpublickeys
  - Resolves: RHEL-107899 [RFE] X-Content-Type-Options header in IdM WebUI
  - Resolves: RHEL-107897 [RFE] Implement Referrer-Policy on IdM WebUI
  - Resolves: RHEL-107045 [RFE] CSP not implemented in IdM WebUI
  - Resolves: RHEL-105139 IPA compatibility with tomcat 10
  - Resolves: RHEL-103492 ipalockout_postop is incorrectly warning about locked user
  - Resolves: RHEL-70229 To add "SameSite" flag to ipa_session cookies
  - Resolves: RHEL-29029 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate manage
  - Resolves: RHEL-154589 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-9
changelog:
  - Don't require fips-mode-setup for FIPS status (RHEL-67635)
  - Check for krbLastSuccessfulAuth being enabled (RHEL-84771)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-11
changelog:
  - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
  - Don't rely on order in trust agent/controller role check (RHEL-99532)


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-112752)
    - Check that expected NSS token matches the current FIPS state (RHEL-104144)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
    - Check that allowed_uids in the SSSD config is valid (RHEL-116895)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-14.el10]
changelog:
  - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
  - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]


author: Phil Sutter <psutter@redhat.com> [1.8.11-15.el10]
changelog:
  - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]


author: Phil Sutter <psutter@redhat.com> [1.8.11-16.el10]
changelog:
  - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169611
  - Resolves: RHEL-133215
  - Resolves: RHEL-146648
  - Resolves: RHEL-148326
  - Resolves: RHEL-148828
  - Resolves: RHEL-157090
  - Resolves: RHEL-161216
  - Resolves: RHEL-161332
  - Resolves: RHEL-169614


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.11.0.10-1.3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-151162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.1
changelog:
  - Update to jdk-21.0.12+8 (GA)
  - Update release notes to 21.0.12+8
  - Bump freetype version to 2.14.3 following JDK-8385390
  - Bump giflib version to 6.1.3 following JDK-8384902
  - Bump HarfBuzz version to 14.2.0 following JDK-8385490
  - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
  - Bump libpng version to 1.6.58 following JDK-8384495
  - Update tagging scripts to include signature checks and correctly handle gating
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Cleanup tagging and gating scripts to appease shellcheck:
  - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
  - * scripts/builds/check_signatures.sh: Quote variable usage.
  - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
  - * scripts/builds/waive_leapp_issue.sh: Likewise.
  - * scripts/builds/waive_rpminspect.sh: Likewise.
  - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
  - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
  - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
  - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
  - Obsolete old RHEL releases (9.7.0-z, 10.1-z)
  - Make zone string debug output optional in TestTranslations
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
  - Resolves: RHEL-212302
  - Resolves: RHEL-212303
  - Resolves: RHEL-212304
  - Resolves: RHEL-151191
  - Resolves: RHEL-212305
  - Resolves: RHEL-188872
  - Resolves: RHEL-212306
  - Resolves: RHEL-212307


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
changelog:
  - Bump release for PQC build
  - Related: RHEL-212302
  - Related: RHEL-212303
  - Related: RHEL-212304
  - Related: RHEL-151191
  - Related: RHEL-212305
  - Related: RHEL-188872
  - Related: RHEL-212306
  - Related: RHEL-212307
  - Related: RHEL-151162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-2.1
changelog:
  - Add CVEs to NEWS file
  - Update to tarball with final changeset ID
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-188872


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Resolves: RHEL-155000
  - Resolves: RHEL-146649
  - Resolves: RHEL-148327
  - Resolves: RHEL-148830
  - Resolves: RHEL-155044


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-150976


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-4
changelog:
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155327
  - Resolves: RHEL-155337
  - Resolves: RHEL-155339
  - Related: RHEL-155000
  - Related: RHEL-146649
  - Related: RHEL-148327
  - Related: RHEL-148830


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-1
changelog:
  - Update to jdk-25.0.3+9 (GA)
  - Update release notes to 25.0.3+9
  - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
  - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
  - Drop local HarfBuzz patch now JDK-8375057 is included upstream
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Bump tzdata version to 2026a following JDK-8379035
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169620
  - Resolves: RHEL-157091
  - Resolves: RHEL-161217
  - Resolves: RHEL-161333
  - Resolves: RHEL-169613


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-3.1
changelog:
  - Cleanup tagging and gating scripts to appease shellcheck:
  - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
  - * scripts/builds/check_signatures.sh: Quote variable usage.
  - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
  - * scripts/builds/waive_leapp_issue.sh: Likewise.
  - * scripts/builds/waive_rpminspect.sh: Likewise.
  - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
  - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
  - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
  - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
  - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-155327
  - Related: RHEL-155339
  - Resolves: RHEL-150977
  - Resolves: RHEL-210972
  - Resolves: RHEL-210993


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.1
changelog:
  - Update to jdk-25.0.4+7 (GA)
  - Update release notes to 25.0.4+7
  - Bump freetype version to 2.14.3 following JDK-8385390
  - Bump giflib version to 6.1.3 following JDK-8384902
  - Bump HarfBuzz version to 14.2.0 following JDK-8385490
  - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
  - Bump libpng version to 1.6.58 following JDK-8384495
  - Require tzdata 2026b due to upstream inclusion of JDK-8383175
  - Drop local copy of JDK-8375294 EOPNOTSUPP patch
  - Obsolete old RHEL releases (9.7.0-z, 10.1-z)
  - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
  - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
  - Make zone string debug output optional in TestTranslations
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
  - Resolves: RHEL-188883
  - Resolves: RHEL-212294
  - Resolves: RHEL-212296


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-2.1
changelog:
  - Add CVEs to NEWS file
  - Update to tarball with final changeset ID
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-188883


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-237.el10]
changelog:
  - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180193]
  - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180193]
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180193]
  - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180193]
  - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180193]
  - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180193]
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180193]
  - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-163186]
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-129337]
  - md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md/raid1: serialize overlap io for writemostly disk (Nigel Croxon) [RHEL-129337]
  - md/raid1: fix the comparing region of interval tree (Nigel Croxon) [RHEL-129337]
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129337] {CVE-2026-43163}
  - md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129337]
  - md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129337]
  - md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129337]
  - md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129337]
  - md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129337]
  - md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129337]
  - md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129337] {CVE-2025-71225}
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129337] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129337]
  - md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129337]
  - md: warn about updating super block failure (Nigel Croxon) [RHEL-129337]
  - md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129337]
  - md: allow configuring logical block size (Nigel Croxon) [RHEL-129337]
  - md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129337]
  - md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129337]
  - md: init bioset in mddev_init (Nigel Croxon) [RHEL-129337] {CVE-2025-68368}
  - md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129337]
  - md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129337]
  - md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129337]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129337] {CVE-2025-68373}
  - md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129337]
  - md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129337]
  - Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129337]
  - md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129337] {CVE-2025-68374}
  - md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129337]
  - md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129337]
  - md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129337]
  - redhat/configs: Add configs for RISC-V core updates (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Teardown riscv specific bits after kvm_exit (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add common nested acceleration support (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: add basic support for host vs guest profiling (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Order the object files alphabetically (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strrchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strnlen() implementation (Jennifer Berringer) [RHEL-147291]
  - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node (Jennifer Berringer) [RHEL-147291]
  - riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: fix several debug register assignment bugs (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: optimize strlen loop efficiency (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: selftests: Add Zalasr extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zalasr extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: add Zilsd and Zclsd extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: allow Zilsd and Zclsd extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: validate input vector csr registers (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: define vtype register elements (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: init vector context with proper vlenb (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: return ENODATA for inactive vector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: define copy_user_page() as copy_page() (Jennifer Berringer) [RHEL-147291]
  - riscv: compat: fix COMPAT_UTS_MACHINE definition (Jennifer Berringer) [RHEL-147291]
  - errata/sifive: remove unreliable warn_miss_errata (Jennifer Berringer) [RHEL-147291]
  - riscv: fix minor typo in syscall.h comment (Jennifer Berringer) [RHEL-147291]
  - riscv: kvm: Fix vstimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: suspend: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: clocksource: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: trace: fix snapshot deadlock with sbi ecall (Jennifer Berringer) [RHEL-147291] {CVE-2026-23217}
  - riscv: remove irqflags.h inclusion in asm/bitops.h (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: smp_processor_id() returns int, not unsigned int (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_image: Fix dead link to boot-image-header.rst (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Cleanup useless VA_USER_XXX definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: Fix Zk bundled extension missing Zknh (Jennifer Berringer) [RHEL-147291]
  - riscv: Sanitize syscall table indexing under speculation (Jennifer Berringer) [RHEL-147291] {CVE-2025-71203}
  - riscv/atomic.h: use RISCV_FULL_BARRIER in _arch_atomic* function. (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zilsd and Zclsd ISA extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for Zilsd and Zclsd (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: use xchg() on non-atomic_long_t variables, not atomic_long_xchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: ptep_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: pmdp_huge_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - selftests/riscv: Add Zicbop prefetch test (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Expose Zicbop extension and its block size (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zalasr instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export Zalasr extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Zalasr (Jennifer Berringer) [RHEL-147291]
  - riscv: add RISC-V Svrsw60t59b extension support (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: Optimize the allocation of vector regset (Jennifer Berringer) [RHEL-147291]
  - riscv: cmpxchg: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: bitops: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: hweight: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: checksum: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Use riscv_has_extension_unlikely (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add bfloat16 extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zicbop extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow bfloat16 extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zicbop extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Provide UAPI for Zicbop block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Change zicbom/zicboz block size to depend on the host isa (Jennifer Berringer) [RHEL-147291]
  - riscv: Update MIPS vendor id to 0x127 (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix CONFIG_AS_HAS_INSN for new .insn usage (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove redundant judgment for the default build target (Jennifer Berringer) [RHEL-147291]
  - riscv: Build loader.bin exclusively for Canaan K210 (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Replace deprecated strcpy in kgdb_arch_handle_qxfer_pkt (Jennifer Berringer) [RHEL-147291]
  - riscv: asm: use .insn for making custom instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: Disable KASAN checks for non-current tasks (Jennifer Berringer) [RHEL-147291] {CVE-2025-40358}
  - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: avoid uninitialized variable in has_thead_homogeneous_vlenb() (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Fix stale vDSO data for late-initialized keys at boot (Jennifer Berringer) [RHEL-147291]
  - riscv: add a forward declaration for cpuinfo_op (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Don't print details of CPUs disabled in DT (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove the PER_CPU_OFFSET_SHIFT macro (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Define MAX_POSSIBLE_PHYSMEM_BITS for zsmalloc (Jennifer Berringer) [RHEL-147291]
  - riscv: Register IPI IRQs with unique names (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Define pgprot_dmacoherent() for non-coherent devices (Jennifer Berringer) [RHEL-147291]
  - riscv: Respect dependencies of ARCH_HAS_ELF_CORE_EFLAGS (Jennifer Berringer) [RHEL-147291]
  - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Fix probe address validation (Jennifer Berringer) [RHEL-147291]
  - riscv: entry: fix typo in comment 'instruciton' -> 'instruction' (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: Ensure that BUFMAX > NUMREGBYTES (Jennifer Berringer) [RHEL-147291]
  - riscv: bpf: Fix uninitialized symbol 'retval_off' (Jennifer Berringer) [RHEL-147291]
  - riscv: errata: Fix the PAUSE Opcode for MIPS P8700 (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add MIPS vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: add validation for zfa, zfh and zfhmin (Jennifer Berringer) [RHEL-147291]
  - riscv: Move vendor errata definitions to new header (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable ARCH_HAVE_NMI_SAFE_CMPXCHG (Jennifer Berringer) [RHEL-147291]
  - riscv: introduce asm/swab.h (Jennifer Berringer) [RHEL-147291]
  - riscv: mmap(): use unsigned offset type in riscv_sys_mmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_ITYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_UTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RD_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_C2_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_funct3 to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_rs2_idx to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Move all duplicate insn parsing macros into asm/insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Strengthen duplicate and inconsistent definition of RV_X() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix typo EXRACT -> EXTRACT (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: Sign extend struct ops return values properly (Jennifer Berringer) [RHEL-147291] {CVE-2025-40079}
  - riscv: use an atomic xchg in pudp_huge_get_and_clear() (Jennifer Berringer) [RHEL-147291]
  - binfmt_elf: preserve original ELF e_flags for core dumps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec: Initialize kexec_buf struct (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in bpf_get_smp_processor_id (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in BPF_MOV64_PERCPU_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in asm_per_cpu (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in new_vmalloc_check (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() performance on RISC-V without Zbb extension (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() code size when CONFIG_RISCV_ISA_ZBB is disabled (Jennifer Berringer) [RHEL-147291]
  - lib/math/gcd: use static key to select implementation at runtime (Jennifer Berringer) [RHEL-147291]
  - riscv: Helper to parse hart index (Jennifer Berringer) [RHEL-147291]
  - riscv: traps_misaligned: properly sign extend value in misaligned load handler (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable interrupt during exception handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Stop considering R_RISCV_NONE as bad relocations (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: Use static array for boot_data (Jennifer Berringer) [RHEL-147291] {CVE-2025-38407}
  - riscv: export boot_cpu_hartid (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sparse warning in vendor_extensions/sifive.c (Jennifer Berringer) [RHEL-147291]
  - Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Jennifer Berringer) [RHEL-147291] {CVE-2025-38434}
  - riscv: fix runtime constant support for nommu kernels (Jennifer Berringer) [RHEL-147291] {CVE-2025-38433}
  - riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Add support for Svinval extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve Kconfig help for RISCV_ISA_V_PREEMPTIVE (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zabha extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Make regs_irqs_disabled() more clear (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Kconfig: Fix help text of CMDLINE_EXTEND (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for PUD THP (Jennifer Berringer) [RHEL-147291]
  - riscv: xchg: Prefetch the destination word for sc.w (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ARCH_HAS_PREFETCH[W] support with Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zicbop instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Support loading Image binary file (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Split the loading of kernel and others (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: add a function to check misalign trap delegability (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: move emulated access uniformity check in a function (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: declare misaligned_access_speed under CONFIG_RISCV_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: use on_each_cpu() for scalar misaligned access probing (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: request misaligned exception from SBI (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add SBI FWFT extension calls (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add FWFT extension interface (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add new SBI error mappings (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: remove useless parenthesis (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add Firmware Feature (FWFT) SBI extensions definitions (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Use nacl_csr_xyz() for accessing H-extension CSRs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add defines for the SBI nested acceleration extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Save/restore HSTATUS in C source (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive vendor extension support and probe for xsfqmaccdod and xsfqmaccqoq (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL (Jennifer Berringer) [RHEL-147291] {CVE-2025-37966}
  - riscv: misaligned: use get_user() instead of __get_user() (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: enable IRQs while handling misaligned accesses (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: factorize trap handling (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: Add handling for ZCB instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (Jennifer Berringer) [RHEL-147291] {CVE-2025-37822}
  - riscv: Replace function-like macro by static inline function (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (Jennifer Berringer) [RHEL-147291]
  - riscv: Provide all alternative macros all the time (Jennifer Berringer) [RHEL-147291]
  - riscv: Properly export reserved regions in /proc/iomem (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix unaligned access info messages (Jennifer Berringer) [RHEL-147291]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Jennifer Berringer) [RHEL-147291]
  - riscv: Use kvmalloc_array on relocation_hashtable (Jennifer Berringer) [RHEL-147291]
  - riscv/purgatory: 4B align purgatory_start (Jennifer Berringer) [RHEL-147291]
  - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Jennifer Berringer) [RHEL-147291]
  - riscv: print hartid on bringup (Jennifer Berringer) [RHEL-147291]
  - riscv: Add norvc after .option arch in runtime const (Jennifer Berringer) [RHEL-147291]
  - RISC-V: errata: Use medany for relocatable builds (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add f & d extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector crypto extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector extension validation checks (Jennifer Berringer) [RHEL-147291]
  - riscv: Add runtime constant support (Jennifer Berringer) [RHEL-147291]
  - riscv: Move nop definition to insn-def.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Add parameter for skipping access speed tests (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of vector cpu hotplug callback (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of cpu hotplug callbacks (Jennifer Berringer) [RHEL-147291]
  - riscv: Change check_unaligned_access_speed_all_cpus to void (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix check_unaligned_access_all_cpus (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix riscv_online_cpu_vec (Jennifer Berringer) [RHEL-147291]
  - riscv: Annotate unaligned access init functions (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zaamo/Zalrsc extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zaamo/Zalrsc extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add parsing for Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler (Jennifer Berringer) [RHEL-147291] {CVE-2025-22069}
  - riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix missing __free_pages() in check_vector_unaligned_access() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix the __riscv_copy_vec_words_unaligned implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Don't use %pK through printk (Jennifer Berringer) [RHEL-147291]
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Jennifer Berringer) [RHEL-147291]
  - riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix a comment typo in set_mm_asid() (Jennifer Berringer) [RHEL-147291]
  - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Jennifer Berringer) [RHEL-147291]
  - riscv: Add stimecmp save and restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Simplify base extension checks and direct boolean return (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove unused TASK_TI_FLAGS (Jennifer Berringer) [RHEL-147291]
  - RISC-V: selftests: Add TEST_ZICBOM into CBO tests (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Expose Zicbom extension and its block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Enable cbo.clean/flush in usermode (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement smp_cond_load8/16() with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call secondary mmu notifier when flushing the tlb (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zicntr and Zihpm extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: remove useless pc check in stacktrace handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Support huge pfnmaps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: separate Zbb optimisations requiring and not requiring toolchain support (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clarify what some RISCV_ISA* config options do (Jennifer Berringer) [RHEL-147291]
  - riscv: fix test_and_{set,clear}_bit ordering documentation (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svvptc/Zabha/Ziccrse exts to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Ziccrse extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zabha extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Svvptc extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal_minsigstksz (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal frame size (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: sign extend compare value in atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: use bitmap_equal() instead of memcmp() (Jennifer Berringer) [RHEL-147291]
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties (Jennifer Berringer) [RHEL-147291]
  - riscv: export __cpuid_to_hartid_map (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: vendorid_list: Add Microchip Technology to the vendor list (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document thead vendor extensions and xtheadvector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Fix context save/restore with xtheadvector (Jennifer Berringer) [RHEL-147291] {CVE-2025-38435}
  - riscv: Add ghostwrite vulnerability (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add thead vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Support xtheadvector save/restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xtheadvector instruction definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: Add CSR encodings for CSR_VXRM/CSR_VXSAT (Jennifer Berringer) [RHEL-147291]
  - RISC-V: define the elements of the VCSR vector CSR (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Use vlenb from DT for thead (Jennifer Berringer) [RHEL-147291]
  - riscv: Add thead and xtheadvector as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Document unaligned vector perf key (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Mark riscv_v_init() as __init (Jennifer Berringer) [RHEL-147291]
  - riscv: Always inline bitops (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: Optimize atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add test count for vstate_prctl (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add pass message for v_initval_nolibc (Jennifer Berringer) [RHEL-147291]
  - riscv: use local label names instead of global ones in assembly (Jennifer Berringer) [RHEL-147291]
  - riscv: qspinlock: Fixup _Q_PENDING_LOOPS definition (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: fix backtracing through exceptions (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Fix the out of bound issue of vmemmap address (Jennifer Berringer) [RHEL-147291] {CVE-2024-57945}
  - riscv: kprobes: Fix incorrect address calculation (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sleeping in invalid context in die() (Jennifer Berringer) [RHEL-147291] {CVE-2024-57939}
  - riscv: module: remove relocation_head rel_entry member allocation (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Fix warnings pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Do not call pmd dtor on vmemmap page table teardown (Jennifer Berringer) [RHEL-147291] {CVE-2024-56673}
  - riscv: Fix IPIs usage in kfence_protect_page() (Jennifer Berringer) [RHEL-147291] {CVE-2024-53687}
  - riscv: Fixup boot failure when CONFIG_DEBUG_RT_MUTEXES=y (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svade and Svadu Extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add Svade and Svadu Extensions Support for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add Svade and Svadu Extensions Support (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix default misaligned access trap (Jennifer Berringer) [RHEL-147291]
  - riscv: Add qspinlock support (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Ziccrse (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Add separate ticket-lock.h (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Reuse arch_spinlock_t of qspinlock (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement xchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement arch_cmpxchg128() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve zacas fully-ordered cmpxchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg32/64() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Do not fail to build on byte/halfword operations with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Move cpufeature.h macros into their own header (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Smnpm and Ssnpm to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Smnpm and Ssnpm extensions for guests (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export the Supm ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Add a pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for the tagged address ABI (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for userspace pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add CSR definitions for pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for pointer masking (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Report vector unaligned access speed hwprobe (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Detect unaligned vector accesses supported (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Replace RISCV_MISALIGNED with RISCV_SCALAR_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Scalar unaligned access emulated on hotplug CPUs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Check scalar unaligned access on all CPUs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call riscv_user_isa_enable() only on the boot hart (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for per-thread envcfg CSR values (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable cbo.zero only when all harts support Zicboz (Jennifer Berringer) [RHEL-147291]
  - perf vendor events arm64: Add Tegra410 Olympus PMU events (Mark Salter) [RHEL-110828]
  - configs: arm64: enable Tegra410 PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 C2C PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 CPU Memory Latency PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE-TGT PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: Add arm_cspmu_acpi_dev_get (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 UCF PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Rename doc to Tegra241 (Mark Salter) [RHEL-110828]
  - i2c: tegra: Add support for Tegra410 (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add logic to support different register offsets (Mark Salter) [RHEL-143333]
  - i2c: tegra: Introduce tegra_i2c_variant to identify DVC and VI (Mark Salter) [RHEL-143333]
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mark Salter) [RHEL-143333]
  - i2c: tegra: remove unused rst (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra264 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add support for SW mutex register (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add HS mode support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Update Tegra256 timing parameters (Mark Salter) [RHEL-143333]
  - i2c: tegra: Use separate variables for fast and fastplus (Mark Salter) [RHEL-143333]
  - i2c: tegra: Do not configure DMA if not supported (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra256 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Remove dma_sync_*() calls (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add missing kernel-doc for dma_dev member (Mark Salter) [RHEL-143333]
  - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172974] {CVE-2026-31581}
  - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171687] {CVE-2026-31467}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-238.el10]
changelog:
  - redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Reserve page-aligned boot_memory_size during fadump_reserve_mem (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init (Mamatha Inamdar) [RHEL-174883]
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179440]
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180014] {CVE-2026-46173}
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170766] {CVE-2026-31532}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-239.el10]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464]
  - io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119]
  - driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464]
  - PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464]
  - s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464]
  - s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464]
  - redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260}
  - objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189]
  - objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189]
  - objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189]
  - objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189]
  - objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189]
  - objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189]
  - objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189]
  - kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189]
  - kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189]
  - objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189]
  - objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189]
  - objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189]
  - kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189]
  - objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189]
  - objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189]
  - objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189]
  - objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189]
  - objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189]
  - objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189]
  - objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189]
  - objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189]
  - objtool: Add the --disas=<function-pattern> action (Yannick Cote) [RHEL-152189]
  - objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189]
  - objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189]
  - objtool: Record symbol name max length (Yannick Cote) [RHEL-152189]
  - objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189]
  - objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189]
  - objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189]
  - tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189]
  - objtool: Create disassembly context (Yannick Cote) [RHEL-152189]
  - objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189]
  - objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189]
  - objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189]
  - objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189]
  - objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189]
  - objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189]
  - objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189]
  - livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193]
  - livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193]
  - livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193]
  - selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193]
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848]
  - netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848]
  - ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848]
  - netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848]
  - netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848]
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848]
  - ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848]
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848]
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848]
  - netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848]
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848]
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848]
  - ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848]
  - netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848]
  - ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848]
  - netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848]
  - netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848]
  - netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848]
  - audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848]
  - netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848]
  - netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474}
  - dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442]
  - dmaengine: dw_edma: correct kernel-doc warnings in <linux/dma/edma.h> (Eder Zulian) [RHEL-172442]
  - New configs in drivers/dma (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412]
  - ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412]
  - ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412]
  - ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412]
  - ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412]
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412]
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412]
  - ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412]
  - ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412]
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412]
  - ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412]
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412]
  - ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746]
  - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607}
  - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641}
  - vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728]
  - selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718]
  - tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718]
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718]
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718]
  - wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579}
  - wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735]
  - ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735]
  - clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420]
  - ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420]
  - ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420]
  - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761]
  - iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761]
  - iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761]
  - iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761]
  - iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761]
  - iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761]
  - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761]
  - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761]
  - iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761]
  - iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761]
  - iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761]
  - iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761]
  - iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761]
  - iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761]
  - iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761]
  - iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761]
  - iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761]
  - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761]
  - iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for filter config (Jared Kangas) [RHEL-156761]
  - iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761]
  - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data source get (Jared Kangas) [RHEL-156761]
  - iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761]
  - iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761]
  - MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761]
  - iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761]
  - iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761]
  - iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data size set (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for interface get (Jared Kangas) [RHEL-156761]
  - iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761]
  - iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761]
  - iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761]
  - iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761]
  - iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761]
  - iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761]
  - iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761]
  - iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761]
  - iio: Add channel type for attention (Jared Kangas) [RHEL-156761]
  - iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761]
  - iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761]
  - iio: backend: extend features (Jared Kangas) [RHEL-156761]
  - iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761]
  - iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761]
  - iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761]
  - iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761]
  - iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761]
  - netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853]
  - net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853]
  - net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853]
  - net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853]
  - net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853]
  - net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853]
  - net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853]
  - net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853]
  - net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853]
  - net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853]
  - selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853]
  - net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853]
  - net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853]


