# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-250.el10]
changelog:
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189660] {CVE-2026-23168}
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (CKI Backport Bot) [RHEL-186643]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (CKI Backport Bot) [RHEL-186643]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-179033]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183513]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183513] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183513] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183513] {CVE-2026-23415}
  - tools: ynl: cli: order set->list conversion in JSON output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-route sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-addr sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ethtool sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert devlink sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add netdevsim wrapper library for YNL tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert tc and tc-filter-add samples to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-link sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ovs sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert netdev sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: move samples to tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add uns-admin-perm to genetlink (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Fill out operation attributes (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add sub-messages (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Update attribute sets (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add definitions (Hangbin Liu) [RHEL-156508]
  - doc/netlink: netlink-raw: Add max check (Hangbin Liu) [RHEL-156508]
  - tools: ynl: produce kselftest-list.txt from tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: support INSTALL_PATH in the tests Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests in /usr/bin/ (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rename TESTS variable to TEST_PROGS (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: make the output compact (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: Makefile's install target now installs ynltool (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: suppress jobserver warning in ynltool version detection (Hangbin Liu) [RHEL-156508]
  - tools: ynl: render event op docs correctly (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: print reply in combined format if possible (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: extract the event/notify handling in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: factor out --list-attrs / --doc handling (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: add --doc as alias to --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: improve --help (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: wrap the doc text if it's long (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: introduce formatting for attr names in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: Fix remaining pylint warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint None, type, dict, generators, init (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint warnings for returns, unused, redefined (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: suppress unhelpful pylint messages (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint issues in ynl_gen_rst (Hangbin Liu) [RHEL-156508]
  - tools: ynl: ethtool: fix pylint issues (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix logic errors reported by pylint (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint global variable related warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint misc warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint dict, indentation, long lines, uninitialised (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint exception warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint redefinition, encoding errors (Hangbin Liu) [RHEL-156508]
  - tools: ynl: pylint suppressions and docstrings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev: clarify the page pool API a little (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix build on systems with old kernel headers (Hangbin Liu) [RHEL-156508]
  - ynl: samples: Fix spelling mistake "failedq" -> "failed" (Hangbin Liu) [RHEL-156508]
  - ynl: fix schema check errors (Hangbin Liu) [RHEL-156508]
  - ynl: fix a yamllint warning in ethtool spec (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add a lint makefile target (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add schema checking (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add big-endian byte-order for u32 IPv4 addresses (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add YNL test framework (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: add function prefix argument (Hangbin Liu) [RHEL-156508]
  - ynl: samples: add tc filter example (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Display enum values in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Parse nested attributes in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Add --list-attrs option to show operation attributes (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: ignore *.d deps files (Hangbin Liu) [RHEL-156508]
  - netlink: specs: support ipv4-or-v6 for dual-stack fields (Hangbin Liu) [RHEL-156508]
  - tools: ynl: Add MAC address parsing support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: remove -lmnl from link flags (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: correct install in Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add traffic distribution balance (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add qstats support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add page-pool stats (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: create skeleton for the C command (Hangbin Liu) [RHEL-156508]
  - tools: ynl: call nested attribute free function for indexed arrays (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev add missing stats to qstat-get (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rework the string representation of NlError (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix indent issues in the main Python lib (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix string attribute length to include null terminator (Hangbin Liu) [RHEL-156508]
  - tools: ynl: avoid print_field when there is no reply (Hangbin Liu) [RHEL-156508]
  - netlink: specs: explicitly declare block scalar strings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix if-idx attribute type (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fou: change local-v6/peer-v6 check (Hangbin Liu) [RHEL-156508]
  - netlink: specs: enforce strict naming of properties (Hangbin Liu) [RHEL-156508]
  - netlink: specs: tc: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: rt-link: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: ovs_flow: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: nfsd: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - docs: netlink: index.rst: add a netlink index file (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix a couple of yamllint warnings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: wrap long doc lines (>80 chars) (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up indentation errors (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up truthy values (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up spaces before comments (Hangbin Liu) [RHEL-156508]
  - netlink: specs: clean up spaces in brackets (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add doc start markers to yaml (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix missing doc (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: use big-endian netlink attribute types (Hangbin Liu) [RHEL-156508]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-251.el10]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188089]
  - riscv: mm: Fix conflict in arch_tlbbatch_add_pending() (Jennifer Berringer) [RHEL-212287]
  - arm64: dts: s32g3: Fix SWT8 watchdog address (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Jared Kangas) [RHEL-212089]
  - iio: core: fix uninitialized data in debugfs (Jared Kangas) [RHEL-212089]
  - iio: buffer: Move from int64_t to s64 for timestamp (Jared Kangas) [RHEL-212089]
  - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Jared Kangas) [RHEL-212089]
  - iio: Replace 'sign' field with union in struct iio_scan_type (Jared Kangas) [RHEL-212089]
  - iio: buffer: ensure repeat alignment is a power of two (Jared Kangas) [RHEL-212089]
  - iio: buffer: cache timestamp offset in scan buffer (Jared Kangas) [RHEL-212089]
  - iio: buffer: check return value of iio_compute_scan_bytes() (Jared Kangas) [RHEL-212089]
  - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Jared Kangas) [RHEL-212089]
  - iio: core: Simplify IIO core managed APIs (Jared Kangas) [RHEL-212089]
  - iio: inkern: call iio_device_put() only on mapped devices (Jared Kangas) [RHEL-212089]
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Jared Kangas) [RHEL-212089]
  - dmaengine: of_dma: Add devm_of_dma_controller_register() (Jared Kangas) [RHEL-212089]
  - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: drop unused module alias (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Jared Kangas) [RHEL-212089]
  - i2c: imx: zero-initialize dma_slave_config for eDMA (Jared Kangas) [RHEL-212089]
  - i2c: imx: ensure no clock is generated after last read (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix i2c issue when reading multiple messages (Jared Kangas) [RHEL-212089]
  - i2c: imx: preserve error state in block data length handler (Jared Kangas) [RHEL-212089]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155388]
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-191988]
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193520] {CVE-2026-52973}
  - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-193670]
  - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-193670]
  - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-193670]
  - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-193670]
  - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-193670]
  - hwmon: Add label support for 64-bit energy attributes (Jared Kangas) [RHEL-193670]
  - hwmon: Introduce 64-bit energy attribute support (Jared Kangas) [RHEL-193670]
  - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - pwm: Add the S32G support in the Freescale FTM driver (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Drop driver local locking (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Jared Kangas) [RHEL-210979]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-189741]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-189741]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-190427]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-190428]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189607] {CVE-2025-71147}
  - gpio: pca953x: propagate regulator_enable() error from resume (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: mask interrupts in irq shutdown (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: pca953x: clarify interrupt source detection (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TCAL6408 TCAL6416 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: gpio-pca95xx: Add tcal6408 and tcal6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: add TCAL6408 and TCAL6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: Add a compatibility and feature list for PCA953x (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: clarify log messages about auto increment feature (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-190842]
  - gpio: Kconfig: Update help for GPIO_PCA953X (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use regmap_update_bits() to improve performance (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TI TCA6418 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add TI TCA6418 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add Toradex ecgpiol16 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use value returning setters (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-190842]
  - crypto: testmgr - Ignore EEXIST on shash allocation (Thomas Huth) [RHEL-153093]
  - crypto: api - Redo lookup on EEXIST (Thomas Huth) [RHEL-153093]
  - sched_ext: Convert scx_dump_state() spinlock to raw spinlock (Herton R. Krzesinski) [RHEL-184683]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179292] {CVE-2026-46099}
  - dt-bindings: rtc: pcf85063: remove quartz-load-femtofarads restriction for nxp,pcf85063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: scope pcf85063_config structures (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: convert from round_rate() to determine_rate() (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: fix incorrect maximum clock rate handling (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: add support for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: create pcf85063_i2c_probe (CKI Backport Bot) [RHEL-190843]
  - dt-bindings: rtc: pcf85063: add binding for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: replace dev_err+return with return dev_err_probe (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: do a SW reset if POR failed (CKI Backport Bot) [RHEL-190843]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188778] {CVE-2025-54518}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185959]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189653] {CVE-2026-23110}
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-183433]
  - iommu: Warn on premature unblock during DMA aliased sibling reset (Eder Zulian) [RHEL-188931]
  - iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (Eder Zulian) [RHEL-188931] {CVE-2026-52952}
  - iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() (Eder Zulian) [RHEL-188931]
  - iommu: Fix nested pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Replace per-group resetting_domain with per-gdev blocked flag (Eder Zulian) [RHEL-188931]
  - iommu: Fix kdocs of pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188552] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188465] {CVE-2026-53016}
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115836]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115836]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115836] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115836]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [partial] (Vladislav Dronov) [RHEL-115836]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [partial] (Vladislav Dronov) [RHEL-115836]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115836]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115836]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115836]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115836]
  - lib/string_choices: Rearrange functions in sorted order (Vladislav Dronov) [RHEL-115836]
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178253]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178253]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178253] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178253] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178253] {CVE-2026-46039}
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178253] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-46012}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178253]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178253] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178253] {CVE-2026-46000}
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178253] {CVE-2026-31676}
  - Revert "Disable CET when calling tboot shutdown procedure." (Tony Camuso) [RHEL-177961]
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179862] {CVE-2026-46227}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172678] {CVE-2026-43038}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174199] {CVE-2026-43186}
  - redhat: disable XEN_PRIVCMD and XENFS (Vitaly Kuznetsov) [RHEL-172496] {CVE-2026-31788 CVE-2026-31787}
  - selftests: fib_nexthops: test stale has_v4 on nexthop replace (Guillaume Nault) [RHEL-152711]
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Guillaume Nault) [RHEL-152711]
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Guillaume Nault) [RHEL-152711]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152711]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152711]
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Guillaume Nault) [RHEL-152711]
  - selftests: net: add ICMP error source address test over xfrm tunnel (Guillaume Nault) [RHEL-152711]
  - icmp: fix ICMP error source address when xfrm policy matches (Guillaume Nault) [RHEL-152711]
  - icmp: prevent possible overflow in icmp_global_allow() (Guillaume Nault) [RHEL-152711]
  - ping: annotate data-races in ping_lookup() (Guillaume Nault) [RHEL-152711]
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Guillaume Nault) [RHEL-152711]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152711]
  - inet: ping: Fix icmp out counting (Guillaume Nault) [RHEL-152711]
  - selftests: fib_nexthops: Add test cases for error routes deletion (Guillaume Nault) [RHEL-152711]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152711]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Guillaume Nault) [RHEL-152711]
  - inet: frags: add inet_frag_queue_flush() (Guillaume Nault) [RHEL-152711]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Guillaume Nault) [RHEL-152711]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168076] {CVE-2026-31419}
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (David Thompson) [RHEL-167064]
  - page_pool: store detach_time as ktime_t to avoid false-negatives (Paolo Abeni) [RHEL-152734]
  - net: Fix rcu_tasks stall in threaded busypoll (Paolo Abeni) [RHEL-152734]
  - net: consume xmit errors of GSO frames (Paolo Abeni) [RHEL-152734]
  - net: Drop the lock in skb_may_tx_timestamp() (Paolo Abeni) [RHEL-152734]
  - net: remove WARN_ON_ONCE when accessing forward path array (Paolo Abeni) [RHEL-152734]
  - net: gro: fix outer network offset (Paolo Abeni) [RHEL-152734]
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152734]
  - linkwatch: use __dev_put() in callers to prevent UAF (Paolo Abeni) [RHEL-152734]
  - net: fix segmentation of forwarding fraglist GRO (Paolo Abeni) [RHEL-152734]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Paolo Abeni) [RHEL-152734]
  - net: update netdev_lock_{type,name} (Paolo Abeni) [RHEL-152734]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Paolo Abeni) [RHEL-152734]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152734]
  - net: gro: clear skb_shinfo(skb)->hwtstamps in napi_reuse_skb() (Paolo Abeni) [RHEL-152734]
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Paolo Abeni) [RHEL-152734]
  - net: dst_metadata: fix IP_DF bit not extracted from tunnel headers (Paolo Abeni) [RHEL-152734]
  - netlink: support dumping IPv4 multicast addresses (Hangbin Liu) [RHEL-123730]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-252.el10]
changelog:
  - Revert "selftests/pidfd: add tests for PIDFD_SELF_*" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftests/powerpc: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftest/powerpc/mm/pkey: fix build-break introduced by commit 00894c3fc917" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: fix faulting-in code in pagemap_ioctl test" (John J Coleman) [RHEL-214159]
  - Bluetooth: btusb: MT7925: Add VID/PID 13d3/3609 (Jiri Benc) [RHEL-191262]
  - redhat/configs: enable CONFIG_SERIAL_8250_MT6577 (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Add ACPI support (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Enable baud clock and manage in runtime PM (Jiri Benc) [RHEL-191347]
  - serial: 8250_platform: Remove unneeded ->iotype assignment (Jiri Benc) [RHEL-191347]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147800]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147800]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31754}
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147800]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147800] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147800] {CVE-2026-31759}
  - usb: misc: usbio: Fix URB memory leak on submit failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31757}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Desnes Nunes) [RHEL-147800] {CVE-2026-31755}
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147800]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147800]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147800]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Desnes Nunes) [RHEL-147800] {CVE-2026-31756}
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147800]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147800] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147800] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147800]
  - usb: roles: get usb role switch from parent only for usb-b-connector (Desnes Nunes) [RHEL-147800]
  - Revert "tcpm: allow looking for role_sw device in the main node" (Desnes Nunes) [RHEL-147800]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: pci: add support for the Intel Nova Lake -H (Desnes Nunes) [RHEL-147800]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147800]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147800] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147800] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147800] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147800]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147800]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147800]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147800]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147800]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147800]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147800]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147800]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147800] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147800]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: fix resume failure if dr_mode is host (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: fix role switching during resume (Desnes Nunes) [RHEL-147800] {CVE-2026-45911}
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147800] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147800]
  - net: usb: introduce usbnet_mii_ioctl helper function (Desnes Nunes) [RHEL-147800]
  - net: usb: remove unnecessary get_drvinfo code and driver versions (Desnes Nunes) [RHEL-147800]
  - net: usb: replace unnecessary get_link functions with usbnet_get_link (Desnes Nunes) [RHEL-147800]
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (Desnes Nunes) [RHEL-147800] {CVE-2025-40120}
  - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Desnes Nunes) [RHEL-147800] {CVE-2025-38736}
  - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Desnes Nunes) [RHEL-147800] {CVE-2025-38725}
  - usbnet: asix AX88772: leave the carrier control to phylink (Desnes Nunes) [RHEL-147800]
  - docs: fix 're-use' -> 'reuse' in documentation (Desnes Nunes) [RHEL-147800]
  - thermal/qcom/lmh: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Desnes Nunes) [RHEL-147800]
  - char: tpm: cr50: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147800]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147800]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147800]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147800]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147800]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147800]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147800]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document mux-states property (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document USB VBUS regulator (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147800] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147800]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147800]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147800]
  - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Desnes Nunes) [RHEL-147800] {CVE-2026-43250}
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147800]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: fix device leak at unbind (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-combo: Add polarity inversion support for SAR2130P (Desnes Nunes) [RHEL-147800]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147800]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147800]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147800]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147800]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147800]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147800]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Add DP offsets and settings for Glymur platforms (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Update QMP PHY with Glymur settings (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: Update the QMP clamp register for V6 (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-usb: Add support for Glymur USB UNI PHY (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,qmp-usb: Add Glymur USB UNI PHY compatible (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Add Glymur compatible (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add QCS615 USB/DP PHY config and DP mode support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp: Add DP v2 PHY register definitions (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add USB/DP exclude handling (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP PHY ops for USB/DP switchable Type-C PHYs (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add TCSR parsing and PHY mode setting (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move USB-only init to usb_power_on (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: add DP link and vco_div clocks for DP PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move reset config into PHY cfg (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add regulator init_load support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP-related fields for USB/DP switchable PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Rename USB-specific ops to prepare for DP support (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: Add QMP USB3+DP PHY for QCS615 (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147800]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147800]
  - usb: gadget: Constify struct configfs_item_operations and configfs_group_operations (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_item_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_group_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147800]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147800]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147800]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (Jaroslav Kysela) [RHEL-180892]
  - ACPI: bus: Fix MFD child automatic modprobe issue (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Switch over to auxiliary bus type (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Convert the driver to a platform one (Mark Langsdorf) [RHEL-173575]
  - iommupt: Fixup build warning by using BIT_ULL() for RISCVPT_NC/IO (Jennifer Berringer) [RHEL-174808]
  - iommupt: Encode IOMMU_MMIO/IOMMU_CACHE via RISC-V Svpbmt bits (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Advertise Svpbmt support to generic page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add ACPI support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Remove overflows on the invalidation path (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fix signedness bug (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Stop polling when CQCSR reports an error (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Allow RISC_VIOMMU to COMPILE_TEST (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add missing GENERIC_MSI_IRQ (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable SVNAPOT support for contiguous ptes (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Use the generic iommu page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Disable SADE (Jennifer Berringer) [RHEL-174808]
  - iommupt: Add the RISC-V page table format (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Skip IRQ count check when using MSI interrupts (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add IOTINVAL after updating DDT/PDT entries (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Simplify maximum determination in riscv_iommu_init_check() (Jennifer Berringer) [RHEL-174808]
  - iommu: make inclusion of riscv directory conditional (Jennifer Berringer) [RHEL-174808]
  - iommu: Pass in old domain to attach_dev callback functions (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: prevent NULL deref in iova_to_phys (Jennifer Berringer) [RHEL-174808] {CVE-2025-39699}
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Update to use iommu_alloc_pages_node_lg2() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Convert to use struct iommu_pages_list (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_free_page() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_alloc_page_node() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fixup compile warning (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add shutdown function for iommu driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Empty iommu queue before enabling it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add support for platform msi (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Paging domain support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Command and fault queue support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Device directory management. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable IOMMU registration and device probe. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU PCIe device driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU platform device driver (Jennifer Berringer) [RHEL-174808]
  - redhat/configs: Enable RISC-V IOMMU (Jennifer Berringer) [RHEL-174808]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152730]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152730]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152730]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152730]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141214]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141214]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-253.el10]
changelog:
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214083] {CVE-2026-64530}
  - x86/fpu: Ensure XFD state on signal delivery (Steve Best) [RHEL-213537]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (Steve Best) [RHEL-213294]
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-212108]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189556] {CVE-2025-68211}
  - i2c: i801: fix hardware state machine corruption in error path (Steve Best) [RHEL-212367]
  - gitlab-ci: enable riscv64 builds for c10s and rhel10 (Michael Krausch-Hofmann)
  - pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: make devm allocations safer and clearer in mtk_eint_do_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: Use dev_fwnode() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: use new GPIO line value setter callbacks (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: don't double-check the GPIO number (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix error checking in mtk_eint_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix new design debounce issue (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix EINT breakage on older controllers (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix the invalid conditions (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Add EINT support for multiple addresses (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Drop mtk_pinconf_bias_set_pd() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: add support for MTK_PULL_PD_TYPE (Jiri Benc) [RHEL-191293]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Steve Best) [RHEL-211103]
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline (Steve Best) [RHEL-210859]
  - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (Steve Best) [RHEL-208745]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193944]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158929]
  - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174252]
  - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187413] {CVE-2026-46303}
  - intel_idle: Add Panther Lake C-states table (Steve Best) [RHEL-185572]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183882]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183882]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix some program return value (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (Steve Best) [RHEL-184884]
  - platform/x86/intel/tpmi/plr: Prevent fault during unbind (Steve Best) [RHEL-182358]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Karol Herbst) [RHEL-170737]
  - Revert "drm/i915: Use preempt_disable/enable_rt() where recommended" (Karol Herbst) [RHEL-170737]
  - Revert "drm/gem: fix build for mm_get_unmapped_area() call after backmerge" (Karol Herbst) [RHEL-170737]
  - Partiall revert "mm: update shmem_[kernel]_file_*() functions to use vma_flags_t" (Karol Herbst) [RHEL-170737]
  - drm: add 4th argument to vfs_parse_fs_string calls (Karol Herbst) [RHEL-170737]
  - redhat/configs: Add new configs from DRM 7.0 backport (Karol Herbst) [RHEL-170737]
  - Merge DRM changes from upstream v6.19..v7.0 (Karol Herbst) [RHEL-170737]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
changelog:
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
  - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
  - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
  - KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
  - Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
  - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
  - KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
  - KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
  - perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
  - perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
  - perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
  - perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
  - perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
  - perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
  - perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
  - x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
  - x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
  - x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
  - Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
  - KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
  - mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
  - module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
  - net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-255.el10]
changelog:
  - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-169756]
  - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178329]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180168] {CVE-2026-46116}
  - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154898] {CVE-2026-23239}
  - pseries/lparcfg: Add resource group monitoring (Mamatha Inamdar) [RHEL-217019]
  - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
  - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-54175]
  - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-54175]
  - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-54175]
  - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
  - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-54175]
  - ata: libata-pmp: add JMicron JMS562 quirk (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: disable LPM on ADATA SU680 SSD (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Tomas Henzl) [RHEL-157217]
  - ata: libata: Fix ata_exec_internal() (Tomas Henzl) [RHEL-157217]
  - ata: libata-eh: Do not retry reset if the device is gone (Tomas Henzl) [RHEL-157217]
  - ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Tomas Henzl) [RHEL-157217]
  - ata: libata-eh: avoid unnecessary calls to ata_scsi_port_error_handler() (Tomas Henzl) [RHEL-157217]
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Tomas Henzl) [RHEL-157217]
  - ata: ahci: Do not read the per port area for unimplemented ports (Tomas Henzl) [RHEL-157217]
  - ata: ahci: fail probe if BAR too small for claimed ports (Tomas Henzl) [RHEL-157217]
  - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-208594]
  - ksmbd: fix memory leak of xattr_stream_name in smb2_rename() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: zero the smb2_read alignment tail to avoid an infoleak (Paulo Alcantara) [RHEL-190706]
  - ksmbd: pin conn during async oplock break notification (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix integer overflow in set_file_allocation_info() (Paulo Alcantara) [RHEL-190706]
  - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-190706]
  - smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-190706]
  - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-190706]
  - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-190706]
  - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-190706]
  - smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-190706]
  - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-190706]
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-190706]
  - redhat/configs: enable CONFIG_CIFS_SMB_DIRECT (Paulo Alcantara) [RHEL-190706]
  - redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-190706]
  - scatterlist: Fix offset in folio calc in extract_xarray_to_sg() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix a memory leak in iov_iter_extract_user_pages() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix missing alloc fail check in iov_iter_extract_bvec_pages() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages() (Paulo Alcantara) [RHEL-190706]
  - cachefiles: Fix double fput (Paulo Alcantara) [RHEL-190706]
  - smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-190706]
  - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-190706]
  - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-190706]
  - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix busy dentry warning on unmount after DIO (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix atime clamp check in read completion (Paulo Alcantara) [RHEL-190706]
  - cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-190706]
  - smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-190706]
  - smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-190706]
  - smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-190706]
  - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix barriering when walking subrequest list (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix missing credit release on failure in cifs_issue_read() (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-190706]
  - smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix DIO write retry for filesystems without a ->prepare_write() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix folio state after ENOMEM whilst under writeback iteration (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix writeback error handling (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix writethrough to use collection offload (Paulo Alcantara) [RHEL-190706]
  - netfs: Replace wb_lock with a bit lock for asynchronicity (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix kdoc warning (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_create_write_req() to handle async cache object creation (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix decision whether to disallow write-streaming due to fscache use (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix app-instance durable supersede session UAF (Paulo Alcantara) [RHEL-190706]
  - ksmbd: snapshot previous oplock state before durable checks (Paulo Alcantara) [RHEL-190706]
  - ksmbd: close superseded durable handles through refcount handoff (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check (Paulo Alcantara) [RHEL-190706]
  - smb/server: do not require delete access for non-replacing links (Paulo Alcantara) [RHEL-190706]
  - ksmbd: don't hold ci->m_lock while waiting for a lease break ack (Paulo Alcantara) [RHEL-190706]
  - ksmbd: annotate oplock list traversals under m_lock (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix outstanding credit leak on abort and error paths (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix credit charge calculation for SMB2 QUERY_INFO (Paulo Alcantara) [RHEL-190706]
  - ksmbd: avoid zeroing the read buffer in smb2_read() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject undersized DACLs before parsing ACEs (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr (Paulo Alcantara) [RHEL-190706]
  - cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-190706]
  - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-190706]
  - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-190706]
  - smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-190706]
  - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-190706]
  - smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix kernel-doc warnings in smb2_lease_break_noti() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix inconsistent indenting warnings (Paulo Alcantara) [RHEL-190706]
  - ksmbd: increase SMB3_DEFAULT_TRANS_SIZE from 1MB to 4MB (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix UBSAN array-index-out-of-bounds in decode_compress_ctxt() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: sleep interruptibly in the durable handle scavenger (Paulo Alcantara) [RHEL-190706]
  - ksmbd: start file id allocation at 1 (Paulo Alcantara) [RHEL-190706]
  - ksmbd: treat read-control opens as stat opens only for leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate :: stream type against directory create (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break conflicting-open leases only as far as needed (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break handle caching for share conflicts (Paulo Alcantara) [RHEL-190706]
  - ksmbd: normalize ungrantable lease states (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return oplock protocol error for level II ack (Paulo Alcantara) [RHEL-190706]
  - ksmbd: avoid level II oplock break notification on unlink (Paulo Alcantara) [RHEL-190706]
  - ksmbd: downgrade oplock after break timeout (Paulo Alcantara) [RHEL-190706]
  - ksmbd: apply create security descriptor first (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return requested create allocation size (Paulo Alcantara) [RHEL-190706]
  - ksmbd: tighten create file attribute validation (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject empty-attribute synchronize-only create (Paulo Alcantara) [RHEL-190706]
  - ksmbd: honor stream delete sharing for base file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: send pending interim for last compound I/O (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return success for deferred final close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: preserve compound responses for chained errors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate handle for create or get object id (Paulo Alcantara) [RHEL-190706]
  - ksmbd: propagate failed command status in related compounds (Paulo Alcantara) [RHEL-190706]
  - ksmbd: deny renaming directory with open children (Paulo Alcantara) [RHEL-190706]
  - ksmbd: check parent directory sharing conflicts on rename (Paulo Alcantara) [RHEL-190706]
  - ksmbd: preserve open change time across rename (Paulo Alcantara) [RHEL-190706]
  - ksmbd: handle durable v2 app instance id (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect context parsing (Paulo Alcantara) [RHEL-190706]
  - ksmbd: invalidate durable handles on oplock break (Paulo Alcantara) [RHEL-190706]
  - ksmbd: supersede disconnected delete-on-close durable handle (Paulo Alcantara) [RHEL-190706]
  - ksmbd: handle missing create contexts for lease opens (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: keep common response iovecs in the work item (Paulo Alcantara) [RHEL-190706]
  - ksmbd: route v2 lease breaks on the client lease channel (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break RH leases before delete-on-close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: honor SMB2 v2 lease epochs (Paulo Alcantara) [RHEL-190706]
  - ksmbd: do not wait for RH lease break ack on overwrite (Paulo Alcantara) [RHEL-190706]
  - ksmbd: chain pending lease breaks before waking waiters (Paulo Alcantara) [RHEL-190706]
  - ksmbd: compute lease break-in-progress flag on response (Paulo Alcantara) [RHEL-190706]
  - ksmbd: treat unnamed DATA stream as base file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: align SMB2 oplock break ack handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: share SMB2 lease state across opens (Paulo Alcantara) [RHEL-190706]
  - ksmbd: clean up lease response flags and directory leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix lease break and ack state handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use connection ClientGUID for lease lookup (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate SMB2 lease create contexts (Paulo Alcantara) [RHEL-190706]
  - smb/server: fix debug log endianness in smb2_cancel() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: track the connection owning a byte-range lock (Paulo Alcantara) [RHEL-190706]
  - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for FSCTL mutations (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for ADS I/O (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require source read access for duplicate extents (Paulo Alcantara) [RHEL-190706]
  - ksmbd: run set info with opener credentials (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for delete-on-close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: serialize QUERY_DIRECTORY requests per file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject non-VALID session in compound request branch (Paulo Alcantara) [RHEL-190706]
  - ksmbd: compress SMB2 READ responses (Paulo Alcantara) [RHEL-190706]
  - ksmbd: negotiate and decode SMB2 compression (Paulo Alcantara) [RHEL-190706]
  - cifs: negotiate chained SMB2 compression capabilities (Paulo Alcantara) [RHEL-190706]
  - smb: add common SMB2 compression transform helpers (Paulo Alcantara) [RHEL-190706]
  - smb: move LZ77 compression into common code (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
  - smb: server: remove code guarded by nonexistent config option (Paulo Alcantara) [RHEL-190706]
  - smb/server: fix incorrect file size in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
  - smb/server: get compression format in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
  - smb/server: implement FSCTL_SET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
  - smb/server: implement FSCTL_GET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
  - smb/server: get compression file attribute on open (Paulo Alcantara) [RHEL-190706]
  - smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: remove duplicate server/smbfsctl.h (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in same_client_has_lease() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-190706]
  - smb/client: Fix error code in smb2_aead_req_alloc() (Paulo Alcantara) [RHEL-190706]
  - smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-190706]
  - smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-190706]
  - smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-190706]
  - smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-190706]
  - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-190706]
  - cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-190706]
  - smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-190706]
  - cifs: remove all cifs files before kill super (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-190706]
  - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-190706]
  - smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix uninitialized variable in smb2_writev_callback (Paulo Alcantara) [RHEL-190706]
  - smb: client: detect short folioq copy in cifs_copy_folioq_to_iter() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: release ksmbd_inode ref via ksmbd_inode_put on lookup paths (Paulo Alcantara) [RHEL-190706]
  - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Paulo Alcantara) [RHEL-190706]
  - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate SID in parent security descriptor during ACL inheritance (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect error path file lifetime (Paulo Alcantara) [RHEL-190706]
  - smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-190706]
  - smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: divide, not multiply, milliseconds by 1000 (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix busy dentry used after unmounting (Paulo Alcantara) [RHEL-190706]
  - smb: client: use data_len for SMB2 READ encrypted folioq copy (Paulo Alcantara) [RHEL-190706]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix undefined variables (Paulo Alcantara) [RHEL-190706]
  - smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-190706]
  - cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix null pointer dereference in compare_guid_key() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix null pointer dereference in proc_show_files() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Paulo Alcantara) [RHEL-190706]
  - SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-190706]
  - netfs, afs: Fix write skipping in dir/link writepages (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_read_folio() to wait on writeback (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix folio->private handling in netfs_perform_write() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix partial invalidation of streaming-write folio (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix leak of request in netfs_write_begin() error handling (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix early put of sink folio in netfs_read_gaps() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix write streaming disablement if fd open O_RDWR (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix read-gaps to remove netfs_folio from filled folio (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential deadlock in write-through mode (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix streaming write being overwritten (Paulo Alcantara) [RHEL-190706]
  - netfs: Defer the emission of trace_netfs_folio() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix overrun check in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix zeropoint update where i_size > remote_i_size (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential for tearing in ->remote_i_size and ->zero_point (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_read_to_pagecache() to pause on subreq failure (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix missing barriers when accessing stream->subrequests locklessly (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix missing locking around retry adding new subreqs (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix cancellation of a DIO and single read subrequests (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-190706]
  - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate inherited ACE SID length (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fail share config requests when path allocation fails (Paulo Alcantara) [RHEL-190706]
  - ksmbd: close durable scavenger races against m_fp_list lookups (Paulo Alcantara) [RHEL-190706]
  - ksmbd: harden file lifetime during session teardown (Paulo Alcantara) [RHEL-190706]
  - ksmbd: centralize ksmbd_conn final release to plug transport leak (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix MR registration for coalesced SG lists (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce and use include/linux/smbdirect.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL (Paulo Alcantara) [RHEL-190706]
  - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-190706]
  - smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-190706]
  - ksmbd: rewrite stop_sessions() with restartable iteration (Paulo Alcantara) [RHEL-190706]
  - smb: server: handle readdir_info_level_struct_sz() error (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/ (Paulo Alcantara) [RHEL-190706]
  - smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-190706]
  - smb: server: stop sending fake security descriptors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: scope conn->binding slowpath to bound sessions only (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix CreateOptions sanitization clobbering the whole field (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount (Paulo Alcantara) [RHEL-190706]
  - ksmbd: destroy async_ida in ksmbd_conn_free() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Paulo Alcantara) [RHEL-190706]
  - MAINTAINERS: create entry for smbdirect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in smb2_open during durable reconnect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix max_connections off-by-one in tcp accept path (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require minimum ACE size in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate response sizes in ipc_validate_msg() (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix active_num_conn leak on transport allocation failure (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_connection_deregister_mr_io unlock while waiting (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix the logic in smbdirect_socket_destroy_sync() without an error (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix copyright header of smbdirect.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: change smbdirect_socket_parameters.{initiator_depth,responder_resources} to __u16 (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: remove unused SMBDIRECT_USE_INLINE_C_FILES logic (Paulo Alcantara) [RHEL-190706]
  - smb: server: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
  - smb: client: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce global workqueues (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: prepare use of dedicated workqueues for different steps (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: remove unused smbdirect_connection_mr_io_recovery_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: wrap rdma_disconnect() in rdma_[un]lock_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: server: remove unused ksmbd_transport_ops.prepare() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
  - smb: server: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_create_accepting()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_{socket_init_accepting,connection_wait_for_connected}() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
  - smb: server: let smb_direct_post_send_data() return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: server: split out smb_direct_send_iter() out of smb_direct_writev() (Paulo Alcantara) [RHEL-190706]
  - smb: server: let smbdirect_map_sges_from_iter() truncate the message boundary (Paulo Alcantara) [RHEL-190706]
  - smb: server: inline smb_direct_create_header() into smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
  - smb: server: move iov_iter_kvec() out of smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of functions from smbdirect_rw.c (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_recv_io_refill[_work]() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: client: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_create_kern()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_init_new() and smbdirect_connect_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_mr_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_send_{single_iter,immediate_work}() (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_full_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: client: change smbd_post_send_empty() to void return (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of functions from smbdirect_mr.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: initialize recv_io->cqe.done = recv_done just once (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce the basic smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_bind() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: split out smbdirect_accept_negotiate_finish() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_init_send_batch_storage() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: provide explicit prototypes for cross .c file functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_public.h with prototypes (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_internal.h define pr_fmt without SMBDIRECT_USE_INLINE_C_FILES (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_socket.h include all headers for used structures (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_create_{kern,accepting}() and smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_accept_connect_request() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connect[_sync]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_socket_set_initial_parameters() call rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_init_{new,accepting}() and helpers (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_shutdown() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_is_connected() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_wait_for_connected() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_legacy_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_mr_io_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_negotiation_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_immediate_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_rdma_{established,event_handler}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_destroy[_sync]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recv_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: define SMBDIRECT_RDMA_CM_[RNR_]RETRY (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: define SMBDIRECT_MIN_{RECEIVE,FRAGMENTED}_SIZE (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_rw.c with server rw code (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_mr.c with client mr code (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: split out smbdirect_connection_recv_io_refill() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_map_sges_from_iter() and helper functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.{send,recv}_io.mem.gfp_mask (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: set SMBDIRECT_KEEPALIVE_NONE before disable_delayed_work(&sc->idle.timer_work); (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection.c to be filled (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_schedule_cleanup[{_lvl,_status}]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.c to be filled (Paulo Alcantara) [RHEL-190706]
  - smb: server: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_internal.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-190706]
  - smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-190706]
  - smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: add some logging to SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.logging infrastructure (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect.h include #include <linux/types.h> (Paulo Alcantara) [RHEL-190706]
  - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-190706]
  - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require 3 sub-authorities before reading sub_auth[2] (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate EaNameLength in smb2_get_ea() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate owner of durable handle on reconnect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Paulo Alcantara) [RHEL-190706]
  - ksmbd: ipc: use kzalloc_flex and __counted_by (Paulo Alcantara) [RHEL-190706]
  - smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
  - smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-190706]
  - smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-190706]
  - smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-190706]
  - vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
  - smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-190706]
  - smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
  - smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-190706]
  - smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-190706]
  - smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-190706]
  - smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-190706]
  - smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-190706]
  - smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-190706]
  - smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
  - smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-190706]
  - smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-190706]
  - fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix OOB write in QUERY_INFO for compound requests (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix the handling of stream->front by removing it (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Paulo Alcantara) [RHEL-190706]
  - smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-190706]
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix memory leaks and NULL deref in smb2_lock() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: do not expire session on binding failure (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix read abandonment during retry (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in durable v2 replay of active file handles (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of share_conf in compound request (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: unset conn->binding on failed binding request (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix share_conf UAF in tree_conn disconnect (Paulo Alcantara) [RHEL-190706]
  - cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-190706]
  - smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix use-after-free in smb2_open() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock (Paulo Alcantara) [RHEL-190706]
  - smb/server: Fix another refcount leak in smb2_open() (Paulo Alcantara) [RHEL-190706]
  - cifs: open files should not hold ref on superblock (Paulo Alcantara) [RHEL-190706]
  - smb: update some doc references (Paulo Alcantara) [RHEL-190706]
  - smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-190706]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [cifs] (Paulo Alcantara) [RHEL-190706]
  - smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-190706]
  - smb: server: Remove duplicate include of misc.h (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix non-IPv6 build (Paulo Alcantara) [RHEL-190706]
  - smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: convert tree_conns_lock to rw_semaphore (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix missing chann_lock while iterating session channel list (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-190706]
  - smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-190706]
  - smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
  - smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
  - smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-190706]
  - cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-190706]
  - smb: server: correct value for smb_direct_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
  - smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add procfs interface for runtime monitoring and statistics (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
  - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-190706]
  - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-190706]
  - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-190706]
  - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
  - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-190706]
  - smb: client: add multichannel async work for CONFIG_CIFS_DFS_UPCALL=n (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-190706]
  - smb: server: reset smb_direct_port = SMB_DIRECT_PORT_INFINIBAND on init (Paulo Alcantara) [RHEL-190706]
  - ksmbd: smbd: fix dma_unmap_sg() nents (Paulo Alcantara) [RHEL-190706]
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-194153]
  - tls: Preserve sk_err across recvmsg() when data has been copied (Sabrina Dubroca) [RHEL-152729]
  - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152729]
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152729]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152729]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154841] {CVE-2026-23240}
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189560] {CVE-2025-40149}
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189578] {CVE-2025-71113}
  - e1000e: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
  - e1000: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
  - e1000e: Use __napi_schedule_irqoff() (Michal Schmidt) [RHEL-186602]
  - e1000e: use ktime_get_real_ns() in e1000e_systim_reset() (Michal Schmidt) [RHEL-186602]
  - net: Consistently define pci_device_ids using named initializers [e1000e] (Michal Schmidt) [RHEL-186602]
  - e1000e: Unroll PTP in probe error handling (Michal Schmidt) [RHEL-186602]
  - e1000: check return value of e1000_read_eeprom (Michal Schmidt) [RHEL-186602]
  - e1000/e1000e: Fix leak in DMA error cleanup (Michal Schmidt) [RHEL-186602]
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Michal Schmidt) [RHEL-186602]
  - e1000e: introduce new board type for Panther Lake PCH (Michal Schmidt) [RHEL-186602]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - e1000e: Switch to use %ptSp (Michal Schmidt) [RHEL-186602]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186335]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186335]
  - net: wwan: t7xx: Add delay between MD and SAP suspend (Jose Ignacio Tornos Martinez) [RHEL-155042]
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180156] {CVE-2026-46117}
  - dt-bindings: input: add debounce-delay-ms common property (Tony Camuso) [RHEL-176366]
  - dt-bindings: Update Sasha Finkelstein's email address (Tony Camuso) [RHEL-176366]
  - MIPS/input: Move RB532 button to GPIO descriptors (Tony Camuso) [RHEL-176366]
  - Input: uinput - take event lock when submitting FF request "event" (Tony Camuso) [RHEL-176366]
  - Input: uinput - fix circular locking dependency with ff-core (Tony Camuso) [RHEL-176366]
  - Input: aiptek - validate raw macro indices before updating state (Tony Camuso) [RHEL-176366]
  - Input: synaptics_usb - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: appletouch - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: keyspan-remote - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: aiptek - use HID headers (Tony Camuso) [RHEL-176366]
  - Input: wm97xx - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
  - Input: mk712 - use guard notation when acquiring spinlock (Tony Camuso) [RHEL-176366]
  - Input: elo - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: matrix-keymap: fix key board wording (Tony Camuso) [RHEL-176366]
  - Input: atlas - check ACPI_COMPANION() against NULL (Tony Camuso) [RHEL-176366]
  - Input: atlas - convert ACPI driver to a platform one (Tony Camuso) [RHEL-176366]
  - input: trackpoint - Enable doubletap by default on capable devices (Tony Camuso) [RHEL-176366]
  - Input: psmouse - remove dedicated kpsmoused workqueue (Tony Camuso) [RHEL-176366]
  - Input: alps - use standard workqueue when registering supplemental device (Tony Camuso) [RHEL-176366]
  - Input: psmouse - replace flush_workqueue() with disable_delayed_work_sync() (Tony Camuso) [RHEL-176366]
  - Input: atkbd - fix various formatting issues (Tony Camuso) [RHEL-176366]
  - Input: atkbd - switch to using explicitly sized types (Tony Camuso) [RHEL-176366]
  - Input: atkbd - use dev_warn_ratelimited() (Tony Camuso) [RHEL-176366]
  - Input: atkbd - use __free() cleanup facility in when parsing FW keymap (Tony Camuso) [RHEL-176366]
  - Input: atkbd - validate scancode in firmware keymap entries (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: Add Parade TC3408 touchscreen controller (Tony Camuso) [RHEL-176366]
  - Input: export input_default_setkeycode (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
  - Input: bcm5974 - recover from failed mode switch (Tony Camuso) [RHEL-176366]
  - Input: libps2 - embed WARN_ON(1) macros into their enclosing if statements (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: qcom,pm8941-pwrkey: Document PMM8654AU (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: touchscreen: imagis: allow linux,keycodes for ist3038 (Tony Camuso) [RHEL-176366]
  - dt-bindings: Fix emails with spaces or missing brackets (Tony Camuso) [RHEL-176366]
  - docs: fix 're-use' -> 'reuse' in documentation (Tony Camuso) [RHEL-176366]
  - Input: gpio_keys - fall back to platform_get_irq() for interrupt-only keys (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Tony Camuso) [RHEL-176366]
  - Documentation: use a source-read extension for the index link boilerplate (Tony Camuso) [RHEL-176366]
  - Input: appletouch - fix potential race between resume and open (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: i2c-hid: Introduce FocalTech FT8112 (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - switch to using managed resources (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - guard polling restart in resume (Tony Camuso) [RHEL-176366]
  - kernel.h: drop hex.h and update all hex.h users (Tony Camuso) [RHEL-176366]
  - Input: serio - complete sizeof(*pointer) conversions (Tony Camuso) [RHEL-176366]
  - Input: elo - switch to use scnprintf() to suppress truncation warning (Tony Camuso) [RHEL-176366]
  - Input: adp5589 - remove a leftover header file (Tony Camuso) [RHEL-176366]
  - doc: input: fix typos in input.rst (Tony Camuso) [RHEL-176366]
  - Input: add ABS_SND_PROFILE (Tony Camuso) [RHEL-176366]
  - Input: psmouse-smbus - add WQ_UNBOUND to alloc_workqueue user (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
  - Input: gpio_keys - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Tony Camuso) [RHEL-176366]
  - dt-bindings: Updates Linus Walleij's mail address (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
  - Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (Tony Camuso) [RHEL-176366]
  - Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls (Tony Camuso) [RHEL-176366]
  - Input: byd - use %*ph for Z packet dump (Tony Camuso) [RHEL-176366]
  - dt-bindings: Remove extra blank lines (Tony Camuso) [RHEL-176366]
  - dt-bindings: Update Krzysztof Kozlowski's email (Tony Camuso) [RHEL-176366]
  - dt-bindings: touchscreen: consolidate simple touch controller to trivial-touch.yaml (Tony Camuso) [RHEL-176366]
  - Input: MT - add INPUT_MT_TOTAL_FORCE flags (Tony Camuso) [RHEL-176366]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Tony Camuso) [RHEL-176366]
  - Input: add INPUT_PROP_HAPTIC_TOUCHPAD (Tony Camuso) [RHEL-176366]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
  - kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
  - arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
  - arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
  - arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
  - arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
  - arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
  - arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
  - arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
  - arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
  - uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
  - arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
  - igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
  - igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
  - igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
  - igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
  - igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
  - net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
  - igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
  - igc: fix missing update of skb->tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
  - igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
  - igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
  - igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
  - igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
  - net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
  - igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
  - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
changelog:
  - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
  - wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
  - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
  - PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
  - PCI: Align head space better (Myron Stowe) [RHEL-178011]
  - PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
  - parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
  - MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
  - resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
  - resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
  - PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
  - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
  - resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
  - resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
  - kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
  - resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
  - resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
  - resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
  - resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
  - selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
  - dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
  - tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
  - tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
  - net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
  - net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
  - selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
  - selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-19
changelog:
  - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
    query-response matching (RHEL-210693)


author: Olivier Fourdan <ofourdan@redhat.com> - 2.0.6-6
changelog:
  - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
    Resolves: https://redhat.atlassian.net/browse/RHEL-191884
    Resolves: https://redhat.atlassian.net/browse/RHEL-191931
    Resolves: https://redhat.atlassian.net/browse/RHEL-191945


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use %autosetup instead of the previous %setup and %patch macros.
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: David Malcolm <dmalcolm@redhat.com> - 14.4.1-2
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
  	fortran/125998, middle-end/126084, rtl-optimization/125173,
  	target/67459, target/105116, target/106895, target/116597,
  	target/119210, target/122948, target/124908, target/125818,
  	target/125972, target/126049, tree-optimization/120201,
  	tree-optimization/126257, tree-optimization/126262


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-9
changelog:
  - nfsd: don't assume service is running when setting thread count to 0 (RHEL-174806)
  - Pass ignore_hosts to export_create() in export_read() (RHEL-223703)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Attila Lakatos <alakatos@redhat.com> - 1.11.0-9
changelog:
  - Backport: fix SSL_CONF_cmd/SSL_new ordering in OpenSSL client connect path
    Resolves: RHEL-188813


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.89.2-1
changelog:
  - Rebase mingw-glib2 to 2.89.2
  - RHEL-212173 - CVE-2026-58010
  - RHEL-212180 - CVE-2026-58011
  - RHEL-212207 - CVE-2026-58012
  - RHEL-212231 - CVE-2026-58013
  - RHEL-190607 - CVE-2026-58014
  - RHEL-212243 - CVE-2026-58015
  - RHEL-190612 - CVE-2026-58016


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Phil Sutter <psutter@redhat.com> [1.1.5-6.el10]
changelog:
  - tests: Prepare exit codes for automake (Phil Sutter) [RHEL-179035]
  - parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-179035]
  - intervals: Fix for inconsistent union field use (Phil Sutter) [RHEL-179035]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-12
changelog:
  - Fixes CVE-2026-9256, CVE-2026-42055 and HTTP/2: Remote Denial of Service
    via compression bomb and Slowloris-style attack


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Rahul Rajesh <rajeshrah22@gmail.com> - 2.2.61-1
changelog:
  - Upgrade to 2.2.61
  - Support referring alt-name in `copy-mac-from` property. RHEL-145074
  - Fix validation of conflicting routes in kernel mode. RHEL-124835
  - Update GPG public key


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.61-2
changelog:
  - Fix copy-mac-from for down interfaces
  - Fix copy-mac-from failing when source interface is down. RHEL-145074
  - Fix OriginalName link match for stacked interfaces. RHEL-167955


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Resolves: RHEL-171557, Fix CVE-2026-40253
  - Resolves: RHEL-169193, Fix syslog warning even for identically configured control points
  - Resolves: RHEL-157535, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-157678, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
  - Resolves: RHEL-157805, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-136094, Update to 3.27.0


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20220807.0-1
changelog:
  - Update to 20220807.0
    - If your applications rely on portability to Windows, see new documentation
      sections "argument-passing rules are program-specific" and "batch files"
      - This release fixes bugs in runs of Windows programs that use standard
        command line parsing rules
      - Runs of non-standard programs may require changes; notable non-standard
        programs include cmd.exe, cscript.exe, and Cygwin programs
    - Skip t/pty.t test on NetBSD too (GH#140)
    - Add strict/warnings
    - Follow Windows argument quoting rules (GH#142)
    - Allow win32_newlines.t to actually run (GH#146)
    - Make t/pty.t test pass on OpenBSD (GH#150)
    - Support Win32 commands having non-standard command line parsing rules
      (GH#148)
    - Support executing Win32 batch files
    - Add IPC::Run::Win32Process, for delivering non-standard command lines
    - Fix reporting of Win32::Process::Create() errors
    - On Windows, avoid hang when closing read end of pipe (GH#156)
    - Ignore known test failure on msys - t/windows_search_path.t (GH#155)
    - Avoid warning with IPCRUNDEBUG, in Windows spawned children
    - Use $^X, not 'perl', in tests
    - Thanks to the new active developer: Noah Misch!


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.128-1
changelog:
  - Update to 0.128
    - Added 'mkdir' to replace 'mkpath', but returning the path object for
      chaining
    - The 'mkpath' method is deprecated in favor of 'mkdir'
    - Added 'has_same_bytes' to efficiently compare the contents of two files
    - Edited SYNOPSIS in the POD


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-4.el10.noarch macro
  - Update license to SPDX format


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.noarch macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37 (#2118006)
    - Allow duplicate warnings when using warnings_exist (GH#8)
  - Use author-independent source URL
  - Use SPDX license expression


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 16.14-2
changelog:
  - Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
  - Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
  - Backport SSLerrmessageExt() helper for improved error reporting
  - Update GUC description to document colon-separated group list support
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 16.14-3
changelog:
  - Add SSL test coverage for colon-separated ssl_ecdh_curve group list
  - Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.2-1
changelog:
  - Resolves: RHEL-178898 Rebase ipa to latest version for RHEL 10.3
  - Resolves: RHEL-179217 ipa-migrate tool is renaming host records & host info in automount information
  - Resolves: RHEL-178538 [Cursor Automated] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-174346 Release Modern UI progress to RHEL 10.3
  - Resolves: RHEL-153857 ipa-migrate doesn't properly handle replication conflicts
  - Resolves: RHEL-153852 ipa-migrate doesn't migrate IPA locations
  - Resolves: RHEL-151578 Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts
  - Resolves: RHEL-151326 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy)
  - Resolves: RHEL-147173 ipa-migrate doesn't process users' sshpublickeys
  - Resolves: RHEL-107899 [RFE] X-Content-Type-Options header in IdM WebUI
  - Resolves: RHEL-107897 [RFE] Implement Referrer-Policy on IdM WebUI
  - Resolves: RHEL-107045 [RFE] CSP not implemented in IdM WebUI
  - Resolves: RHEL-105139 IPA compatibility with tomcat 10
  - Resolves: RHEL-103492 ipalockout_postop is incorrectly warning about locked user
  - Resolves: RHEL-70229 To add "SameSite" flag to ipa_session cookies
  - Resolves: RHEL-29029 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate manage
  - Resolves: RHEL-154589 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Christian Heimes <cheimes@redhat.com> - 1.7.0-1
changelog:
  - Update to 1.7.0, fixes rhbz#2233656
  - modernize packaging, upstream has remove setup.py
  - remove setup.cfg hacks for RHEL


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Tomáš Hrnčiar <thrciar@redhat.com> - 1.6.0-3
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Priscila Gutierres <pgutier@redhat.com>
        Thomas Moschny <thomas.moschny@gmx.de>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Lukáš Zachar <lzachar@redhat.com> - 78.1.1-3
changelog:
  - Adjust gating
  - Generic gating.yaml for all rhel
  - Use CS repos instead of Fedora
  - Remove python versions not available on c10s
  - Test with python-isort


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Milan Crha <mcrha@redhat.com> - 0.9.1-12
changelog:
  - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
    Resolves: RHEL-213751


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171246


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
changelog:
  - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
    Resolves: RHEL-181681
  - Fix information disclosure via MITM attack bypassing TLS in net-imap.
    (CVE-2026-42246)
    Resolves: RHEL-181769
  - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
    Resolves: RHEL-181799


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170933
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-170911
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169964


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-35
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
    Includes core fix plus additional performance optimizations 
    Resolves: RHEL-181680
  - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
    Resolves: RHEL-181753
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
    Resolves: RHEL-181785


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.20-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  Resolves: RHEL-140921
  - Policy for go-fdo-server
  Resolves: RHEL-145754
  - Allow iptables_t read state of some processes
  Resolves: RHEL-164304
  - Allow iptables read firewalld process state
  Resolves: RHEL-164304
  - Allow systemd-machined read virtd process state
  Resolves: RHEL-164304
  - Allow systemd-machined read svirt process state
  Resolves: RHEL-164304
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  Resolves: RHEL-168417
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  Resolves: RHEL-164864
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  Resolves: RHEL-142548
  - Allow systemd-tmpfiles to adjust resource limits
  Resolves: RHEL-139855


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.21-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  Resolves: RHEL-141858
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  Resolves: RHEL-156457
  - Label /run/coreos with coreos_installer_var_run_t
  Resolves: RHEL-156456
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  Resolves: RHEL-156456
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  Resolves: RHEL-170267
  - Remove 14 permissive domains
  Resolves: RHEL-166039
  - Do not audit iptables attempts to read other process state
  Resolves: RHEL-164304


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.22-1
changelog:
  - Allow virtqemud execute kmod in the kmod domain
  Resolves: RHEL-99904
  - Allow qatlib map kernel modules
  Resolves: RHEL-133797
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  Resolves: RHEL-167849
  - Allow go-fdo-server to read system information
  Resolves: RHEL-145754


author: Veronika Syncakova <vsyncako@redhat.com> - 42.1.23-1
changelog:
  - Bring back execmem permission for svirt_tcg_t
  - Leave content of virtqemud_use_execmem empty
  - Dontaudit libvirt-daemons execmem
  - Allow virtstoraged to setattr fixed disk devices
  Resolves: RHEL-44901


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.24-1
changelog:
  - Apply the systemd system generator template to the kdump-dep generator
  Resolves: RHEL-155963
  - Allow staff user mounton /var/lib dirs
  Resolves: RHEL-171123
  - Allow staff user read nsfs files
  Resolves: RHEL-171123
  - Allow staff user additional sandboxing permissions
  Resolves: RHEL-171123
  - Allow staff_sudo_t read PID1's process state
  Resolves: RHEL-171123
  - Allow staff_sudo_t read logind sessions files
  Resolves: RHEL-171123
  - Allow staff user delete thump_tmp_t files
  Resolves: RHEL-171123
  - Allow staff user connect to systemd-logind over a unix stream socket
  Resolves: RHEL-171123
  - Allow staff user mount /proc
  Resolves: RHEL-171123
  - Support confined users usage of bubblewrap
  Resolves: RHEL-171123
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-171123
  - Allow some confined users read and map generic log files
  Resolves: RHEL-171123
  - Add files_mounton_generic_tmp_dirs() interface
  Resolves: RHEL-171123
  - Apply the systemd system generator template to the anaconda generator
  Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
  - Support new sanlock features - using libdm and SG_IO
  Resolves: RHEL-171586
  - Allow pcm-sensor-server the sys_admin capability
  Resolves: RHEL-171325
  - Allow the kernel to execute also special files
  Resolves: https://redhat.atlassian.net/browse/RHEL-72728
  - Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
  Resolves: RHEL-62706
  - Dontaudit virt_driver_domain execmem
  Resolves: RHEL-44901


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.25-1
changelog:
  - Allow kernel write to unconfined and sysadm users' keys
  Resolves: RHEL-156860
  - Allow logwatch to getattr nsfs files
  Resolves: RHEL-160897
  - Support systemtap on a UEFI+SecureBoot system
  Resolves: RHEL-178490
  - Remove extra parameters from interface headers
  Resolves: RHEL-129394
  - Add missing interface requirements
  Resolves: RHEL-135488


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.26-1
changelog:
  - Add missing rule for automotive policy
  Resolves: RHEL-216823
  - Allow aide get attributes of all filesystems
  Resolves: RHEL-182423
  - Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
  Resolves: RHEL-169587
  - Dontaudit unconfined_t map its private directories
  Resolves: RHEL-154554
  - Allow dhcpcd hook scripts read generic files in /proc
  Resolves: RHEL-153117
  - Allow dhcpc_hook_t connect to init_t over a unix stream socket
  Resolves: RHEL-147153
  - Allow dhcpc_hook_t unix_dgram_socket and module_request
  Resolves: RHEL-147153
  - Allow sysadm_t run and read/write networkmanager bpf programs
  Resolves: RHEL-145714
  - Allow nfsidmapd read virt lib files
  Resolves: RHEL-132866
  - Support cronie create crontab backups
  Resolves: RHEL-129528
  - Allow unconfined_t mounton its lnk_files
  Resolves: RHEL-127120
  - Allow systemd-machined to manage nspawn runtime directory
  Resolves: RHEL-105966


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-153277)
  - rescan-scsi-bus.sh: Replace 'which' with build in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix issing output fields in --export format (RHEL-119246, RHEL-123748)
  - sg_inq: re-add Unit serial number field (RHEL-119246, RHEL-123748)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-12
changelog:
  - groupmod.c: delete gr_free_members(&grp) to avoid double free
    Resolves: RHEL-135902
  - subordinateio.c: list_owner_ranges(): Fix duplicate range when
    username matches ID. Resolves: RHEL-114226


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-1
changelog:
  - Rebased to virt-manager-5.1.0 (RHEL-119228)
  - The rebase also fixes the following bugs:
      RHEL-105818


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-2
changelog:
  - virtinst: interface: add support for backend.hostname and backend.fqdn (RHEL-95370)
  - maint: use constants instead of strings for boot devices (RHEL-71842)
  - virtinst: rework get_boot_order (RHEL-71842)
  - virtinst: guest: introduce can_use_device_boot_order (RHEL-71842)
  - virtinst: remove legacy attribute from set_boot_order/get_boot_order (RHEL-71842)
  - installer: add support to use device boot order (RHEL-71842)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.8-1
changelog:
  - Rebase to virt-v2v 2.11.8
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-1
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-2
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.12.0-1
changelog:
  - Rebase to virt-v2v 2.12.0
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301
  - Fix online-disks firstboot in Powershell Constrained Language Mode
    resolves: RHEL-210639


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182444


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-7
changelog:
  - CVE fix for: CVE-2026-55999, CVE-2026-56000
    Resolves: https://redhat.atlassian.net/browse/RHEL-191523
    Resolves: https://redhat.atlassian.net/browse/RHEL-191533


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


