# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-4
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-35963]
  - Resolves: RHEL-35963
    ([Azure][WALA] Consider to disable Log collector [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-7
changelog:
  - wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
  - Resolves: RHEL-46713
    ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-9
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
  - Resolves: RHEL-68796
    (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-10
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
  - Resolves: RHEL-84073
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.13.1.1-2
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
  - Resolves: RHEL-109465
    ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
  - Resolves: RHEL-96792
    ([Azure][WALA][RHEL-10] Missing man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
  - Resolves: RHEL-114155
    ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243]
  - Resolves: RHEL-82243
    ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.0-1
changelog:
  - aardvark-dns-1.13.0-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
  - Resolves: RHEL-65320


author: Jindrich Novy <jnovy@redhat.com> - 2:1.13.1-1
changelog:
  - aardvark-dns-1.13.1-1.el10
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
  - Related: RHEL-58990


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.1
changelog:
  RHEL 10.1 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108928


author: Radovan Sroka <rsroka@redhat.com> - 0.18.4-1
changelog:
  - aide-0.18.4 is available
  Resolves: rhbz#1910486
  - Please port your pcre dependency to pcre2. Pcre has been deprecated
  Resolves: rhbz#2128267


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241210-11
changelog:
  - [AMDCLIENT 10.0 Feature] amdgpu linux-firmware for the 2025 H mobile platform (RHEL-61604)
  - [AMDCLIENT 10.0 Feature] linux-firmware for a 2025 mobile platform (RHEL-61477)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  Resolves: RHEL-61604, RHEL-61477


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250812-19
changelog:
  - Update linux-firmware to latest upstream (RHEL-108921)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates for various ASICs
  - panthor: Add firmware for more Mali GPUs
  - amdgpu: update renoir firmware
  - amdgpu: add SMU 14.0.3 kicker firmware
  - amdgpu: add PSP 14.0.3 firmware
  - amdgpu: add GC 12.0.1 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SDMA 7.0.1 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update SDMA 7.0.0 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - amdgpu: Update GCN 4.0.5 microcode
  - amdgpu: Update SDMA 6.1.0 microcode
  - amdgpu: Update GC 11.5.0 microcode
  - qcom: Add QDU100 firmware image files required for booting.
  - linux-firmware: Add firmware for airoha-npu driver
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - linux-firmware: Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: update dmcub fw for dcn314
  - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  - cirrus: cs35l41: Update Firmware for Dell Oasis
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - amdgpu: update dmcub fw for various DCN version
  - WHENCE: extract more license statements
  - WHENCE: clarify io_ti origin
  - amdgpu: Update GC 11.5.1 microcode
  - rtw89: 8852b: update fw to v0.29.128.0
  - rtw89: 8852bt: update fw to v0.29.127.0
  - rtw89: 8922a: add regd fw element with version R72-R6
  - rtw89: 8852c: add regd fw element with version R72-R57
  - rtw89: 8922a: update BB parameter V49
  - qcom: Update gpu firmwares of QCS615 chipset
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  Resolves: RHEL-108921


author: Denys Vlasenko <dvlasenk@redhat.com> - 20251111-20
changelog:
  - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
  - AMDGPU: Update firmware for Strix Halo (RHEL-104078)
  - AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
  - Update linux-firmware to latest upstream
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - Revert "rtw89: 8852b: update fw to v0.29.128.0"
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - rtw89: 8852bt: update fw to v0.29.122.1
  - Revert "rtw89: 8852bt: update fw to v0.29.127.0"
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - linux-firmware: Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7920 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443
  - Revert "linux-firmware: update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: Xe2LPD DMC v2.29
  - i915: Xe3LPD DMC v2.32
  - i915: Xe3LPD_3002 DMC v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - linux-firmware: Add ISH firmware file for Intel Pather Lake platform
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - WHENCE: extract multitech license text
  - WHENCE: extract ueagle license
  - WHENCE: use LICENCE.sensoray for s2255drv
  - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
  - WHENCE: clean up emi62 and yam license statements
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - linux-firmware: ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - amdgpu: DMCUB updates for various ASICs
  - mediatek: mtk_wed: drop links for mt7988
  - Revert "amdgpu: update gc 10.3.6 firmware"
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - amdgpu: DMCUB updates for various ASICs
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location
  - amdgpu: update PSP 14.0.3 kicker firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update SMU 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - intel_vpu: Update NPU firmware
  - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
  - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - amdgpu: Update ISP FW for isp v4.1.1
  - Update README.md to clarify S-o-b requirements
  - firmware: qcom: Reorder VPU firmware entries in WHENCE
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l41: Move entries to correct driver section in WHENCE
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - amdgpu: DMCUB updates for various ASICs
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  Resolves: RHEL-117675, RHEL-104078, RHEL-107606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260107-21
changelog:
  - Update linux-firmware to latest upstream (RHEL-119866)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - linux-firmware: add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - linux-firmware: update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - linux-firmware: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150 GPU
  - qcom: Add firmwares for sm8450 GPU
  - qcom: Add firmwares for sm8550 GPU
  - qcom: Add firmwares for sm8650 GPU
  - qcom: Add firmwares for sm8750 GPU
  - Makefile: add licence header
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - linux-firmware: Update amd-ucode copyright information
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - WHENCE: fix version string for video firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update smu 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992
  - mt76: update firmware for MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - linux-firmware: Update AMD cpu microcode
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  Resolves: RHEL-119866


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260130-22
changelog:
  - Update linux-firmware to latest upstream (RHEL-145527)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - linux-firmware: Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc FW for core102-56 release
  - iwlwifi: Add Hr/Gf firmware for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - linux-firmware: update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - linux-firmware: update firmware for MT7920 WiFi device
  Resolves: RHEL-145527


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260508-23
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - amdgpu: update SMU 14.0.3 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 4.4.4 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update SDMA 4.4.5 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update renoir firmware
  - amdgpu: update aldebaran firmware
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - amdgpu: DMCUB updates for various ASICs
  - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - linux-firmware: update firmware for MT7925 WiFi device
  - Revert "linux-firmware: Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - linux-firmware: Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
  - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
  - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - WHENCE: Move Dell remoteproc firmware to correct section
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc FW for core103-40 release
  - iwlwifi: Add Hr/Gf firmware for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - linux-firmware: add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: update firmware for qat_402xx devices
  - linux-firmware: update firmware for qat_420xx devices
  - linux-firmware: update firmware for an8811hb 2.5G ethernet phy
  - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
  - linux-firmware: update firmware for MT7920 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Quasar core
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - linux-firmware: update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - linux-firmware: add firmware for Lontium LT8713SX DP hub
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - linux-firmware: update firmware for MT7902 BT device
  - linux-firmware: update firmware for MT7902 WiFi device
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - amdgpu: DMCUB updates for various ASICs
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
  - Bluetooth: Add symbolic links for Intel Solar firmware variants
  - Bluetooth: Add symbolic links for Intel Pulsar firmware variants
  - Bluetooth: Add symbolic links for Intel AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - linux-firmware: Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - WHENCE: Correct 2 trailing whitespaces
  - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - linux-firmware: Add Dell ISH firmware for Intel panther lake systems
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-154363


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.34-1
changelog:
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
    Resolves: RHEL-60724
  - gui: Fix GTK warnings when removing non-existent accelerators (k.koukiou)
    Resolves: RHEL-45999
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-61460
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-61460
  - Disable checking for the rdp verb in Anaconda (a.badger)


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.35-1
changelog:
  - Add release notes for RDP kickstart support (adamkankovsky)
    Resolves: RHEL-96216
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
    Resolves: RHEL-96216
  - Adjust to pykickstart adding support for RDP (k.koukiou)
    Resolves: RHEL-96216
  - Adjust to pykickstart removing support for VNC (k.koukiou)
    Resolves: RHEL-119216
  - Remove temporary isFinal getter and DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - Add test for product DBUS API (adamkankovsky)
    Resolves: RHEL-119216
  - New getter for product in Runtime module (adamkankovsky)
    Resolves: RHEL-119216
  - Partial pick of 7a1ae76 (ruff/isort) limited to runtime (adamkankovsky)
    Resolves: RHEL-119216
  - Test for kickstart scripts (akankovs)
    Resolves: RHEL-119216
  - Migrate the %pre-install, %post, %onerror and %traceback scripts
    (akankovs)
    Resolves: RHEL-119216
  - Check if text mode was actually requested by kickstart (#2293672) (mkolman)
    Resolves: RHEL-119216
  - Get kickstart data via DBus (akankovs)
    Resolves: RHEL-119216
  - Adding a implementation for runtime and ui commands (akankovs)
    Resolves: RHEL-119216
  - Update tests for kickstart commands (akankovs)
    Resolves: RHEL-119216
  - Migration of the remaining kickstart commands to the Runtime module
    (akankovs)
    Resolves: RHEL-119216
  - Fix mock LUKS devices logic in tests (vtrefny)
  - Fix checking for locked LUKS devices (vtrefny)
  - Bump required version of blivet to 3.13 (vtrefny)
    Resolves: RHEL-115016
  - Catch blivet.errors.ISCSIError in ISCSIDiscoverTask (vtrefny)
    Resolves: RHEL-115016
  - Disable LVM auto-activation during installation (vtrefny)
    Resolves: RHEL-115016


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.36-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-118305
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-118305
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-118305
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-115411
  - Add pyproject.toml for project configuration (bciconel)
  - Support Flatpak installations from Satellite OCI registries (bciconel)
    Resolves: RHEL-95061
    Resolves: RHEL-95062
  - Configure default Flatpak remote for RHEL 10 (bciconel)
  - flatpak: enable installation with CDROM source type (bciconel)
    Resolves: RHEL-116800


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.38-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-58830


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.39-1
changelog:
  - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Collect kernel arguments before installation to pass to bootc
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
    Related: RHEL-58215
  - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
    Related: RHEL-58215
  - Add bootc installation method (ppolawsk)
    Resolves: RHEL-58215
  - Include bootc command in expected pykickstart commands (ppolawsk)
    Related: RHEL-58215


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.47-1
changelog:
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101789
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Resolves: RHEL-173441
  - Refactor remaining X timeout references (mkolman)
    Resolves: RHEL-173441
  - Set RHSM machine name based on user provided hostname (mkolman)
    Resolves: RHEL-149198


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79256)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Nick Clifton <nickc@redhat.com> - 13.10-1
changelog:
  - Rebuild against LLVM 22.  (RHEL-140399)
  - Require C++17 for building.
  - Annocheck: Ignore Risc-V attribute sections.
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.


author: Nick Clifton <nickc@redhat.com> - 13.12-1
changelog:
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.  (RHEL-170885)
  - Annocheck: Look for compromising characters in pathnames.


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-68490
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68468
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69315


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-101356


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106152


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-2
changelog:
  - Bump version to get automation to do builds and create an erratum
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.4-1
changelog:
  - Update to latest upstream version 1.7.4
  - Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release (RHEL-69036)
  - Add back ansible-test subpackage and drop doc subpackage
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging) (RHEL-59076)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content) (RHEL-69034)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release (RHEL-69763)
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core) (RHEL-66996)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35566
  - Convert input certificates
    Resolves: RHEL-44616
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40870


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67567
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61433


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67567
  - Fix requirements for ansible-core
    Resolves: RHEL-68648


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67567
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40228
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-70023
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68441
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70021
  - Collection: No more role module duplication
    Resolves: RHEL-71124


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67567
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78229


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104653
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92890
  - Provide compatibility for AAH naming
    Resolves: RHEL-89438
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-95104
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78635


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104653
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106560


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139147
  - Add suppport for passkey management
    Resolves: RHEL-139258
  - Add suppport for sysaccount management
    Resolves: RHEL-140600
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140606


author: Maxwell G <gotmax@e.email> - 2.2.7-2
changelog:
  - BuildRequire ansible-packaging on Fedora
  - Resolves: rhbz#2126889
  - Fix inverted conditionals and build/install the collection using ansible-galaxy
  - Keep ansible-lint disabled for now
  - Remove unnecessary macros
  - Exclude files with galaxy.yml build_ignore


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.12
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121558


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced in 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
changelog:
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-17
changelog:
  - Do not remove PVs from devices file if disabled or doesn't exist
    Resolves: RHEL-65846
  - iscsi: Use node.startup=onboot option for Login
    Resolves: RHEL-53719
  - tests: Make sure selinux_test doesn't try to create mountpoints
    Resolves: RHEL-78988


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-18
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74076
  - Include additional information in PartitioningError
    Resolves: RHEL-84686


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-19
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-84685
    Resolves: RHEL-84663


author: Vojtech Trefny <vtrefny@redhat.com> - 3.13.0-3
changelog:
  - iSCSI: don't crash when LUN ID >= 256
    Resolves: RHEL-122305
  - Remove the safe_dbus module
    Related: RHEL-122305


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Release 1.13.0
  - Update to bootc 1.13.0
  - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
    rebuild in install environment (workaround for upstream Makefile issue)
  - Package shell completions (bash, zsh, fish)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Jon Maloy <jmaloy@redhat.com> - 5.0.1-7
changelog:
  - Fix CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-141553
  - Fix CVE-2025-68114 (memory corruption)
    Resolves: RHEL-137749


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121729
  - Added channel binding support
  - resolves: RHEL-103400


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-15
changelog:
  - ci-cc_disk_setup-add-sgdisk-to-sfdisk-convertion-dictio.patch [RHEL-36093]
  - ci-Get-rid-of-gdisk-dependency.patch [RHEL-36093]
  - Resolves: RHEL-36093
    (Remove cloud-init dependency on obsolete gdisk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-16
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54372]
  - Resolves: RHEL-54372
    ([RHEL10]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-17
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54688]
  - Resolves: RHEL-54688
    ([RHEL 10.0] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-19
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016]
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019]
  - Resolves: RHEL-65016
    (Configuring metric for default gateway is not working [rhel-10])
  - Resolves: RHEL-65019
    (NoCloud - network_config bridges incorrectly configured [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-6
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
  - Resolves: RHEL-128097
    ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Resolves: RHEL-85671


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 4:2.246.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0
  - Resolves: RHEL-143694


author: Jindrich Novy <jnovy@redhat.com> - 4:2.247.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0
  - Resolves: RHEL-135340


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.62.0-2
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-7.el10
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 5:0.64.0-5
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111917


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163803
  - Resolves: RHEL-163824

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Jindrich Novy <jnovy@redhat.com> - 1.27-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.27
  - add conditional Requires on container-selinux for SELinux-enabled systems
  - Resolves: RHEL-164639
  - Resolves: RHEL-169517


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240807-1.git7ea320f
changelog:
  - fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
changelog:
  - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - LEGACY: drop cipher@pkcs12 = SEED-CBC
  - fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  - nss: be stricter with new purposes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
changelog:
  - TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
  - openssh: remove sntrup761x25519-sha512@openssh.com key_exchange


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3
changelog:
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519 and mlkem768secp256r1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008
changelog:
  - alg_lists: mark MLKEM768 kex experimental
  - openssh, libssh: refactor kx maps to use tuples
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: skip warning on --set=FIPS if bootc
  - update-crypto-policies: don't output FIPS warning in fips mode


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158207)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@redhat.com> - 5.3-2
changelog:
  - New upstream 5.3 release
  - Drop release gpg key, unsupported by gpgverify.
  - Drop all local patches
  - Add debugedit-5.3-elflint-test.patch
  - Add gcc-c++ as BuildRequires
  - Add gdb as BuildRequires
  - Install debugedit-classify-ar and man page


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Ales Matej <amatej@redhat.com> - 4.20.0-21
changelog:
  - autoremove: when a dangling protected dependency is found produce a warning
    and skip it (RHEL-128445)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Pavel Valena <pvalena@redhat.com> - 107-4
changelog:
  - fix(systemd-udevd): handle root=gpt-auto for systemd-v258
  - fix(systemd-repart): allow partition format
  - feat(install.d): do not remove UKIs on remove)
  - fix(dracut.install): remove extraneous quotes in dracut arguments
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
    Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
changelog:
  - Rebase to edk2-stable202508 [RHEL-111718]
  - Resolves: RHEL-111718
    ([edk2,rhel-10] rebase to edk2-stable202508)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
changelog:
  - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
  - Resolves: RHEL-109548
    ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
changelog:
  - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
  - Resolves: RHEL-115880
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-4
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
  - Resolves: RHEL-126085
    ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-1
changelog:
  - Rebase to edk2-stable202511 [RHEL-118386]
  - Resolves: RHEL-118386
    ([edk2,rhel-10] rebase to edk2-stable202511)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-2
changelog:
  - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
  - Resolves: RHEL-138335
    ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-3
changelog:
  - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
  - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - Resolves: RHEL-139470
    (Enable memory debug logging support in firmware image configs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-4
changelog:
  - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
  - edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
  - edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
  - Resolves: RHEL-134956
    (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
  - Resolves: RHEL-147785
    ([edk2] pick up openssl updates)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-5
changelog:
  - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
  - Resolves: RHEL-150696
    (edk2: Add JSON descriptors for uefi-vars builds)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-1
changelog:
  - Rebase to edk2-stable202602 [RHEL-151719]
  - Resolves: RHEL-151719
    ([edk2,rhel-10] rebase to edk2-stable202602)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-2
changelog:
  - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161575]
  - Resolves: RHEL-161575
    (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.3])


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-zero-sh_addr.patch
    elfutils-0.194-alloc-jobs.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Resolves: RHEL-65061
  - Resolves: RHEL-57504
  - Resolves: RHEL-57492
  - Resolves: RHEL-56750


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-105425


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.3-106
changelog:
  - Add /var/lib/fapolicyd to tmpfiles
  Resolves: RHEL-104873
  - Allow fapolicyd to connect to systemd-machined
  Resolves: RHEL-77071


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-16
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114752


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-24
changelog:
  - bundled pyasn1: replace with dependency to fix CVE-2026-30922
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-157188, RHEL-155669


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Jan Grulich <jgrulich@redhat.com> - 1.4.7-1
changelog:
  - Update to 1.4.7
    Resolves: RHEL-126427
  - Make flatpak-builder to use fusermount3
    Resolves: RHEL-72576
  - Disable %check


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
    Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
    Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Florian Weimer <fweimer@redhat.com> - 2.39-120
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-151554)
  - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
  - resolv: Check hostname for validity (CVE-2026-4438)
  - resolv: Count records correctly (CVE-2026-4437)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module


author: Frédéric Bérat <fberat@redhat.com> - 2.39-83
changelog:
  - Fix memory leak in freopen, mode flag and wide-oriented stream handling (RHEL-115823)	
  - Add comprehensive tests and document limitations (RHEL-115823)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
changelog:
  - Fix 3.8.13 CVEs and security issues, update Makefile.in
  - Fix CVE-2026-33846
  - Fix CVE-2026-42009
  - Fix CVE-2026-33845
  - Fix CVE-2026-42010
  - Fix CVE-2026-3833
  - Fix CVE-2026-42011
  - Fix CVE-2026-42012
  - Fix CVE-2026-42013
  - Fix CVE-2026-42014
  - Fix CVE-2026-5260
  - Fix CVE-2026-42015
  - Fix CVE-2026-3832
  - Fix CVE-2026-5419
  - Fix upstream security issue #1808
  - Fix upstream security issue #1810
  - Fix upstream security issue #1813
  - Fix upstream security issue #1818
  - Fix upstream security issue #1818
  - Fix upstream security issue #1819
  - Fix upstream security issue #1822
  - Fix upstream security issue #1841
  - Fix upstream security issue #1823
  - Fix upstream security issue #1817
  - Fix upstream security issue #1820
  - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in


author: Alejandro Sáez <asm@redhat.com> - 1.25.3-4
changelog:
  - Cleanup lib/ ownership
  - Remove legacy logic forcing lib/ into golang-tests
  - Move lib/wasm, lib/fips140, and lib/time to main golang package
  - Fixes go_js_wasm_exec availability


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-26
changelog:
  - Resolves RHEL-161792: CVE-2026-27877
  - Resolves RHEL-166318: CVE-2026-33810
  - Resolves RHEL-166490: CVE-2026-32282
  - Resolves RHEL-167360: CVE-2026-32280
  - Resolves RHEL-167516: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Sam Feifer <sfeifer@redhat.com> - 5.3.0-5
changelog:
  - Resolves RHEL-166319: CVE-2026-33810
  - Resolves RHEL-166491: CVE-2026-32282
  - Resolves RHEL-167361: CVE-2026-32280
  - Resolves RHEL-167517: CVE-2026-32283


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78242


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-5
changelog:
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-6
changelog:
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-7
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-9
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955
  - Expose XFS version in virt-filesystems
    resolves: RHEL-144074


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.8-1
changelog:
  - Rebase to guestfs-tools 1.55.8
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Christophe Fergeau <cfergeau@redhat.com> - 6:0.8.7-2
changelog:
  - rebuild for CVE-2025-68121, CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
  - Resolves: RHEL-140518
  - Resolves: RHEL-145414
  - Resolves: RHEL-146723
  - Resolves: RHEL-146928
  - Resolves: RHEL-149248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - New option commit_invalid_mode: Choose what happens when a
    character not in valid input characters is typed
    (Resolves: github-mike-fabian-issue#133)
  - Translation update from Weblate (de 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.3-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.3
  - Add a feature to insert or remove RLM or LRM markers to change the
    direction of a line of bidi text (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/500)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Peter Koprda <pkoprda@redhat.com> - 0:3.10.3-1
changelog:
  - Updates message of the day from Insights to Lightspeed
  - Resolves: RHEL-113967
  - Resolves: RHEL-122146


author: Peter Schrimpel <pschrimp@redhat.com> - 0:3.10.4-1
changelog:
  - Switch Meson build system for Makefile
  - Remove six dependency
  - Resolves: RHEL-143989
  - Resolves: RHEL-147443


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.5-1
changelog:
  - Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
  - feat: Malware Detection wildcards support and fix concurrent scan false
    positives (#4746) (63891960+mtclinton@users.noreply.github.com)
  - chore(pre-commit): update and add new hook conventional-pre-commit
    (xiangceliu@redhat.com)
  - chore(build): enable packit building for release branch
    (xiangceliu@redhat.com)
  - feat: add all rules scanned to malware detection upload (#4735)
    (63891960+mtclinton@users.noreply.github.com)
  - fix(data-processing): fix unpredictable behavior of --context (#4740)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
  - fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
    core-selinux (xiangceliu@redhat.com)
  - feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
  - chore(spec): New spec "podman system info --json" for data analysis
    (huali@redhat.com)
  - chore(manifests): remove/merge remained useless components (#4747)
    (xiangceliu@redhat.com)
  - chore(manifests): use the base module instead of component (#4730)
    (xiangceliu@redhat.com)
  - chore: add egg_release back to collection with a condition (#4729)
    (xiangceliu@redhat.com)
  - fix(build): prepare the filters.yaml before setting up  (#4745)
    (xiangceliu@redhat.com)
  - chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
  - chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
    (xiangceliu@redhat.com)
  - chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
  - chore(test): don't pass context when root is passed to initialize_broker
    (#4720) (xiangceliu@redhat.com)
  - chore: update PR template and remove RPM/Egg delivery guide (#4723)
    (xiangceliu@redhat.com)
  - feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
    (#4705) (44796653+huali027@users.noreply.github.com)
  - feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
    (44796653+huali027@users.noreply.github.com)
  - fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
  - feat: add CoreEgg/CoreRpm to identify current collector (#4724)
    (xiangceliu@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-9
changelog:
  - Don't require fips-mode-setup for FIPS status (RHEL-67635)
  - Check for krbLastSuccessfulAuth being enabled (RHEL-84771)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-11
changelog:
  - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
  - Don't rely on order in trust agent/controller role check (RHEL-99532)


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-112752)
    - Check that expected NSS token matches the current FIPS state (RHEL-104144)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
    - Check that allowed_uids in the SSSD config is valid (RHEL-116895)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61276


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-212.el10]
changelog:
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-150776]
  - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-150776]
  - redhat: bump RHEL_MINOR for 10.3 (Alexandra Hájková)
  - net: use NUMA drop counters for softnet_data.dropped (Guillaume Nault) [RHEL-145975]
  - inet: raw: add drop_counters to raw sockets (Guillaume Nault) [RHEL-145975]
  - udp: add drop_counters to udp socket (Guillaume Nault) [RHEL-145975]
  - net: add sk->sk_drop_counters (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_skbadd() helper (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers (Guillaume Nault) [RHEL-145975]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-135095]
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (Audra Mitchell) [RHEL-97168]
  - configs: riscv: Enable StarFive and ESWIN drivers (Jennifer Berringer) [RHEL-129062]
  - riscv: Fix memory leak in module_frob_arch_sections() (Jennifer Berringer) [RHEL-129062]
  - reset: eswin: Add eic7700 reset driver (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: reset: eswin: Documentation for eic7700 SoC (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: eswin: add HiFive Premier P550 board device tree (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: add initial support for EIC7700 SoC (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: riscv: Add SiFive HiFive Premier P550 board (Jennifer Berringer) [RHEL-129062]
  - riscv: Add Kconfig option for ESWIN platforms (Jennifer Berringer) [RHEL-129062]
  - riscv: add Andes SoC family Kconfig support (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix regulator error check and Kconfig dependency (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix unsigned comparison to less than zero issue (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Add EIC7700 pinctrl driver (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Optimize PLT/GOT entry counting (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Fix out-of-bounds relocation access (Jennifer Berringer) [RHEL-129062] {CVE-2025-37975}
  - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-213.el10]
changelog:
  - powerpc/smp: Expose die_id and die_cpumask (Mamatha Inamdar) [RHEL-138728]
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-151838]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-151838]
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-153335]
  - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Jared Kangas) [RHEL-152643]
  - arm64: dts: s32g: Add device tree information for the OCOTP driver (Jared Kangas) [RHEL-152643]
  - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Jared Kangas) [RHEL-152643]
  - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Jared Kangas) [RHEL-152643]
  - redhat/scripts: remove remnants of git notes usage and dead code (Jan Stancek)
  - vsock: document write-once behavior of the child_ns_mode sysctl (Stefano Garzarella) [RHEL-151754]
  - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-151754]
  - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-151754]
  - vsock: document namespace mode sysctls (Stefano Garzarella) [RHEL-151754]
  - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148483]
  - ice: dpll: fix rclk pin state get and misplaced header macros (Ivan Vecera) [RHEL-146369]
  - ice: dpll: Support E825-C SyncE and dynamic pin discovery (Ivan Vecera) [RHEL-146369]
  - drivers: Add support for DPLL reference count tracking (Ivan Vecera) [RHEL-146369]
  - redhat: configs: Enable CONFIG_DPLL_REFCNT_TRACKER for debug (Ivan Vecera) [RHEL-146369]
  - dpll: Add reference count tracking support (Ivan Vecera) [RHEL-146369]
  - dpll: Enhance and consolidate reference counting logic (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Add support for mux pin type (Ivan Vecera) [RHEL-146369]
  - dpll: Support dynamic pin index allocation (Ivan Vecera) [RHEL-146369]
  - dpll: Add notifier chain for dpll events (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Associate pin with fwnode handle (Ivan Vecera) [RHEL-146369]
  - dpll: Allow associating dpll pin with a firmware node (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-146257]
  - redhat: set defaults for RHEL 10.2 (Scott Weaver)


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-214.el10]
changelog:
  - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618]
  - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134674]
  - vdpa/mlx5: update MAC address handling in mlx5_vdpa_set_attr() (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: reuse common function for MAC address updates (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: update mlx_features with driver state check (Cindy Lu) [RHEL-127007]
  - redhat/configs: enable CONFIG_AQTION on all archs (Michal Schmidt) [RHEL-150852]
  - mm/migrate: fix sleep in atomic for large folios and buffer heads (Ming Lei) [RHEL-144763]
  - fs/ext4: use sleeping version of sb_find_get_block() (Ming Lei) [RHEL-144763]
  - fs/jbd2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/ocfs2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: introduce sleeping flavors for pagecache lookups (Ming Lei) [RHEL-144763]
  - fs/buffer: split locking for pagecache lookups (Ming Lei) [RHEL-144763]
  - fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT (Ming Lei) [RHEL-144763]
  - block: reject bs > ps block devices when THP is disabled (Ming Lei) [RHEL-144763]
  - md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - block: don't silently ignore metadata for sync read/write (Ming Lei) [RHEL-144763]
  - bio: use memzero_page() in bio_truncate() (Ming Lei) [RHEL-144763]
  - drbd: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - ext4: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: factor out common part in blkdev_fallocate() (Ming Lei) [RHEL-144763]
  - fs: introduce FALLOC_FL_WRITE_ZEROES to fallocate (Ming Lei) [RHEL-144763]
  - dm: clear unmap write zeroes limits when disabling write zeroes (Ming Lei) [RHEL-144763]
  - scsi: sd: set max_hw_wzeroes_unmap_sectors if device supports SD_ZERO_*_UNMAP (Ming Lei) [RHEL-144763]
  - nvmet: set WZDS and DRB if device enables unmap write zeroes operation (Ming Lei) [RHEL-144763]
  - nvme: set max_hw_wzeroes_unmap_sectors if device supports DEAC bit (Ming Lei) [RHEL-144763]
  - block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Ming Lei) [RHEL-144763]
  - ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd (Ming Lei) [RHEL-144763]
  - block: don't use strcpy to copy blockdev name (Ming Lei) [RHEL-144763]
  - block: allow IOC_PR_READ_* ioctls with BLK_OPEN_READ (Ming Lei) [RHEL-144763]
  - block: fix EOD return for device with nr_sectors == 0 (Ming Lei) [RHEL-144763]
  - block: change blk_get_meta_cap() stub return -ENOIOCTLCMD (Ming Lei) [RHEL-144763]
  - block: fix lbmd_guard_tag_type assignment in FS_IOC_GETLBMD_CAP (Ming Lei) [RHEL-144763]
  - block: fix FS_IOC_GETLBMD_CAP parsing in blkdev_common_ioctl() (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk INTEL SSDSC2KG480G8 max_sectors (Ming Lei) [RHEL-144763]
  - ata: libata: Add libata.force parameter max_sec (Ming Lei) [RHEL-144763]
  - ata: libata: Add support to parse equal sign in libata.force (Ming Lei) [RHEL-144763]
  - ata: libata: Change libata.force to use the generic ATA_QUIRK_MAX_SEC quirk (Ming Lei) [RHEL-144763]
  - ata: libata: Add ata_force_get_fe_for_dev() helper (Ming Lei) [RHEL-144763]
  - ata: libata: Add ATA_QUIRK_MAX_SEC and convert all device quirks (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk DELLBOSS VD max_sectors (Ming Lei) [RHEL-144763]
  - loop: revert exclusive opener loop status change (Ming Lei) [RHEL-144763]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (Ming Lei) [RHEL-144763]
  - nvme-pci: handle changing device dma map requirements (Ming Lei) [RHEL-144763]
  - nvme-pci: DMA unmap the correct regions in nvme_free_sgls (Ming Lei) [RHEL-144763]
  - Revert "rnbd-clt: fix refcount underflow in device unmap path" (Ming Lei) [RHEL-144763]
  - blk-mq: use BLK_POLL_ONESHOT for synchronous poll completion (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix garbage output in foreground mode (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix error handling for starting device (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix IO thread idle check (Ming Lei) [RHEL-144763]
  - block: make the new blkzoned UAPI constants discoverable (Ming Lei) [RHEL-144763]
  - ublk: fix ublksrv pid handling for pid namespaces (Ming Lei) [RHEL-144763]
  - block: Fix an error path in disk_update_zone_resources() (Ming Lei) [RHEL-144763]
  - rnbd-clt: fix refcount underflow in device unmap path (Ming Lei) [RHEL-144763]
  - nvmet: do not copy beyond sybsysnqn string length (Ming Lei) [RHEL-144763]
  - null_blk: fix kmemleak by releasing references to fault configfs items (Ming Lei) [RHEL-144763]
  - block: zero non-PI portion of auto integrity buffer (Ming Lei) [RHEL-144763]
  - nvme-fc: release admin tagset if init fails (Ming Lei) [RHEL-144763]
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8 (Ming Lei) [RHEL-144763]
  - ublk: fix use-after-free in ublk_partition_scan_work (Ming Lei) [RHEL-144763]
  - blk-mq: avoid stall during boot due to synchronize_rcu_expedited (Ming Lei) [RHEL-144763]
  - loop: add missing bd_abort_claiming in loop_set_status (Ming Lei) [RHEL-144763]
  - block: don't merge bios with different app_tags (Ming Lei) [RHEL-144763]
  - blk-rq-qos: Remove unlikely() hints from QoS checks (Ming Lei) [RHEL-144763]
  - loop: don't change loop device under exclusive opener in loop_set_status (Ming Lei) [RHEL-144763]
  - block, bfq: update outdated comment (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix Makefile to rebuild on header changes (Ming Lei) [RHEL-144763]
  - selftests/ublk: add test for async partition scan (Ming Lei) [RHEL-144763]
  - ublk: scan partition in async way (Ming Lei) [RHEL-144763]
  - block,bfq: fix aux stat accumulation destination (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix signedness bug in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: clean up user copy references on ublk server exit (Ming Lei) [RHEL-144763]
  - block: validate interval_exp integrity limit (Ming Lei) [RHEL-144763]
  - block: validate pi_offset integrity limit (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix leaked ID in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: fix deadlock when reading partition table (Ming Lei) [RHEL-144763]
  - block: add allocation size check in blkdev_pr_read_keys() (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: replace zone_capacity with zone_capacity_mb when creating devices (Ming Lei) [RHEL-144763]
  - zloop: use READ_ONCE() to read lo->lo_state in queue_rq path (Ming Lei) [RHEL-144763]
  - loop: use READ_ONCE() to read lo->lo_state without locking (Ming Lei) [RHEL-144763]
  - selftests: ublk: add user copy test cases (Ming Lei) [RHEL-144763]
  - selftests: ublk: add support for user copy to kublk (Ming Lei) [RHEL-144763]
  - selftests: ublk: forbid multiple data copy modes (Ming Lei) [RHEL-144763]
  - selftests: ublk: don't share backing files between ublk servers (Ming Lei) [RHEL-144763]
  - selftests: ublk: use auto_zc for PER_IO_DAEMON tests in stress_04 (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix fio arguments in run_io_and_recover() (Ming Lei) [RHEL-144763]
  - selftests: ublk: remove unused ios map in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: correct last_rw map type in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix overflow in ublk_queue_auto_zc_fallback() (Ming Lei) [RHEL-144763]
  - block: move around bio flagging helpers (Ming Lei) [RHEL-144763]
  - blk-mq-dma: always initialize dma state (Ming Lei) [RHEL-144763]
  - blk-mq: delete task running check in blk_hctx_poll() (Ming Lei) [RHEL-144763]
  - block: fix cached zone reports on devices with native zone append (Ming Lei) [RHEL-144763]
  - ublk: don't mutate struct bio_vec in iteration (Ming Lei) [RHEL-144763]
  - block: prohibit calls to bio_chain_endio (Ming Lei) [RHEL-144763]
  - ublk: allow non-blocking ctrl cmds in IO_URING_F_NONBLOCK issue (Ming Lei) [RHEL-144763]
  - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures (Ming Lei) [RHEL-144763]
  - nvme-auth: use kvfree() for memory allocated with kvcalloc() (Ming Lei) [RHEL-144763]
  - nvmet-tcp: use kvcalloc for commands array (Ming Lei) [RHEL-144763]
  - nvmet-rdma: use kvcalloc for commands and responses arrays (Ming Lei) [RHEL-144763]
  - nvme: fix typo error in nvme target (Ming Lei) [RHEL-144763]
  - nvmet-fc: use pr_* print macros instead of dev_* (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: remove unused lsdir member. (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - nvme-fc: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Ming Lei) [RHEL-144763]
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Ming Lei) [RHEL-144763]
  - blk-mq: add blk_rq_nr_bvec() helper (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_RESERVATION ioctl (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_KEYS ioctl (Ming Lei) [RHEL-144763]
  - nvme: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - scsi: sd: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - block: enable per-cpu bio cache by default (Ming Lei) [RHEL-144763]
  - block: use bio_alloc_bioset for passthru IO by default (Ming Lei) [RHEL-144763]
  - nvme-fc: don't hold rport lock when putting ctrl (Ming Lei) [RHEL-144763]
  - nvme-pci: add debug message on fail to read CSTS (Ming Lei) [RHEL-144763]
  - nvme-pci: print error message on failure in nvme_probe (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: fix DMA channel debug print (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: move DMA initialization to EPC init callback (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant subsysnqn field from ctrl (Ming Lei) [RHEL-144763]
  - nvmet: add sanity checks when freeing subsystem (Ming Lei) [RHEL-144763]
  - block/rnbd: correct all kernel-doc complaints (Ming Lei) [RHEL-144763]
  - blk-mq: use queue_hctx in blk_mq_map_queue_type (Ming Lei) [RHEL-144763]
  - sbitmap: fix all kernel-doc warnings (Ming Lei) [RHEL-144763]
  - ublk: add helper of __ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: pass const pointer to ublk_queue_is_zoned() (Ming Lei) [RHEL-144763]
  - ublk: refactor auto buffer register in ublk_dispatch_req() (Ming Lei) [RHEL-144763]
  - ublk: add `union ublk_io_buf` with improved naming (Ming Lei) [RHEL-144763]
  - ublk: add parameter `struct io_uring_cmd *` to ublk_prep_auto_buf_reg() (Ming Lei) [RHEL-144763]
  - kfifo: add kfifo_alloc_node() helper for NUMA awareness (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential uaf for 'queue_hw_ctx' (Ming Lei) [RHEL-144763]
  - blk-mq: use array manage hctx map instead of xarray (Ming Lei) [RHEL-144763]
  - ublk: prevent invalid access with DEBUG (Ming Lei) [RHEL-144763]
  - s390/dasd: Use scnprintf() instead of sprintf() (Ming Lei) [RHEL-144763]
  - s390/dasd: Move device name formatting into separate function (Ming Lei) [RHEL-144763]
  - s390/dasd: Remove unnecessary debugfs_create() return checks (Ming Lei) [RHEL-144763]
  - s390/dasd: Fix gendisk parent after copy pair swap (Ming Lei) [RHEL-144763]
  - block: ignore __blkdev_issue_discard() return value (Ming Lei) [RHEL-144763]
  - block: fix typos in comments and strings in blk-core (Ming Lei) [RHEL-144763]
  - block: Remove references to __device_add_disk() (Ming Lei) [RHEL-144763]
  - Revert "Merge branch 'loop-aio-nowait' into for-6.19/block" (Ming Lei) [RHEL-144763]
  - block: use min() instead of min_t() (Ming Lei) [RHEL-144763]
  - zloop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - loop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - zloop: fix zone append check in zloop_rw() (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add a maintainer for zoned block device support (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add missing block layer user API header files (Ming Lei) [RHEL-144763]
  - block: remove the declaration of elevator_init_mq function (Ming Lei) [RHEL-144763]
  - Revert "block: consider discard merge last" (Ming Lei) [RHEL-144763]
  - fs: Add the __data_racy annotation to backing_dev_info.ra_pages (Ming Lei) [RHEL-144763]
  - block: plug attempts to batch allocate tags multiple times (Ming Lei) [RHEL-144763]
  - loop: add hint for handling aio via IOCB_NOWAIT (Ming Lei) [RHEL-144763]
  - loop: try to handle loop aio command via NOWAIT IO first (Ming Lei) [RHEL-144763]
  - loop: move command blkcg/memcg initialization into loop_queue_work (Ming Lei) [RHEL-144763]
  - loop: add lo_submit_rw_aio() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_rw_aio_prep() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_cmd_nr_bvec() (Ming Lei) [RHEL-144763]
  - drbd: turn bitmap I/O comments into regular block comments (Ming Lei) [RHEL-144763]
  - block: rate-limit capacity change info log (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: update zloop parameters (Ming Lei) [RHEL-144763]
  - zloop: introduce the ordered_zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: introduce the zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: simplify checks for writes to sequential zones (Ming Lei) [RHEL-144763]
  - zloop: fail zone append operations that are targeting full zones (Ming Lei) [RHEL-144763]
  - zloop: make the write pointer of full zones invalid (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Remove throtl_slice from struct throtl_data (Ming Lei) [RHEL-144763]
  - block/blk-throttle: drop unneeded blk_stat_enable_accounting (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Fix throttle slice time for SSDs (Ming Lei) [RHEL-144763]
  - block: consider discard merge last (Ming Lei) [RHEL-144763]
  - floppy: fix for PAGE_SIZE != 4KB (Ming Lei) [RHEL-144763]
  - ps3disk: use memcpy_{from,to}_bvec index (Ming Lei) [RHEL-144763]
  - block-dma: properly take MMIO path (Ming Lei) [RHEL-144763]
  - nvme-pci: migrate to dma_map_phys instead of map_page (Ming Lei) [RHEL-144763]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-144763]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-144763]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-144763]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-144763]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-144763]
  - dm: fix zone reset all operation processing (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in disk_report_zones() (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Ming Lei) [RHEL-144763]
  - blk-zoned: Move code from disk_zone_wplug_add_bio() into its caller (Ming Lei) [RHEL-144763]
  - blk-zoned: Document disk_zone_wplug_schedule_bio_work() locking (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a typo in a source code comment (Ming Lei) [RHEL-144763]
  - null_blk: fix zone read length beyond write pointer (Ming Lei) [RHEL-144763]
  - blk-mq-dma: fix kernel-doc function name for integrity DMA iterator (Ming Lei) [RHEL-144763]
  - block: fix merging data-less bios (Ming Lei) [RHEL-144763]
  - ublk: return unsigned from ublk_{,un}map_io() (Ming Lei) [RHEL-144763]
  - ublk: remove unnecessary checks in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - block: add lockdep to queue_limits_commit_update() (Ming Lei) [RHEL-144763]
  - nbd: defer config unlock in nbd_genl_connect (Ming Lei) [RHEL-144763]
  - block: clean up indentation in blk_rq_map_iter_init() (Ming Lei) [RHEL-144763]
  - nbd: defer config put in recv_work (Ming Lei) [RHEL-144763]
  - block: introduce bdev_zone_start() (Ming Lei) [RHEL-144763]
  - block: refactor disk_zone_wplug_sync_wp_offset() (Ming Lei) [RHEL-144763]
  - block: improve blk_zone_wp_offset() (Ming Lei) [RHEL-144763]
  - block: don't return 1 for the fallback case in blkdev_get_zone_info (Ming Lei) [RHEL-144763]
  - nvme: remove virtual boundary for sgl capable devices (Ming Lei) [RHEL-144763]
  - block: accumulate memory segment gaps per bio (Ming Lei) [RHEL-144763]
  - virtio_blk: NULL out vqs to avoid double free on failed resume (Ming Lei) [RHEL-144763]
  - null_blk: allow byte aligned memory offsets (Ming Lei) [RHEL-144763]
  - null_blk: single kmap per bio segment (Ming Lei) [RHEL-144763]
  - null_blk: use memzero_page() (Ming Lei) [RHEL-144763]
  - null_blk: consistently use blk_status_t (Ming Lei) [RHEL-144763]
  - null_blk: simplify copy_from_nullb (Ming Lei) [RHEL-144763]
  - ublk: use rq_for_each_segment() for user copy (Ming Lei) [RHEL-144763]
  - ublk: use copy_{to,from}_iter() for user copy (Ming Lei) [RHEL-144763]
  - block: fix cached zone reporting after zone append was used (Ming Lei) [RHEL-144763]
  - block: don't leak disk->zones_cond for !disk_need_zone_resources (Ming Lei) [RHEL-144763]
  - xfs: use blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: add zone write plug condition to debugfs zone_wplugs (Ming Lei) [RHEL-144763]
  - block: improve zone_wplugs debugfs attribute output (Ming Lei) [RHEL-144763]
  - block: introduce BLKREPORTZONESV2 ioctl (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_get_zone_info() (Ming Lei) [RHEL-144763]
  - block: refactor blkdev_report_zones() code (Ming Lei) [RHEL-144763]
  - block: track zone conditions (Ming Lei) [RHEL-144763]
  - block: use zone condition to determine conventional zones (Ming Lei) [RHEL-144763]
  - block: reorganize struct blk_zone_wplug (Ming Lei) [RHEL-144763]
  - block: introduce disk_report_zone() (Ming Lei) [RHEL-144763]
  - block: cleanup blkdev_report_zones() (Ming Lei) [RHEL-144763]
  - block: freeze queue when updating zone resources (Ming Lei) [RHEL-144763]
  - block: handle zone management operations completions (Ming Lei) [RHEL-144763]
  - block: make bio auto-integrity deadlock safe (Ming Lei) [RHEL-144763]
  - block: blocking mempool_alloc doesn't fail (Ming Lei) [RHEL-144763]
  - selftests: ublk: make ublk_thread thread-local variable (Ming Lei) [RHEL-144763]
  - selftests: ublk: set CPU affinity before thread initialization (Ming Lei) [RHEL-144763]
  - ublk: use struct_size() for allocation (Ming Lei) [RHEL-144763]
  - ublk: implement NUMA-aware memory allocation (Ming Lei) [RHEL-144763]
  - ublk: reorder tag_set initialization before queue allocation (Ming Lei) [RHEL-144763]
  - blktrace: add support for REQ_OP_WRITE_ZEROES tracing (Ming Lei) [RHEL-144763]
  - drbd: replace kmap() with kmap_local_page() in receiver path (Ming Lei) [RHEL-144763]
  - blktrace: for ftrace use correct trace format ver (Ming Lei) [RHEL-144763]
  - blktrace: use debug print to report dropped events (Ming Lei) [RHEL-144763]
  - blktrace: handle BLKTRACESETUP2 ioctl (Ming Lei) [RHEL-144763]
  - blktrace: trace zone write plugging operations (Ming Lei) [RHEL-144763]
  - blktrace: expose ZONE APPEND completions to blktrace (Ming Lei) [RHEL-144763]
  - blktrace: add block trace commands for zone operations (Ming Lei) [RHEL-144763]
  - blktrace: move ftrace blk_io_tracer to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: move trace_note to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: differentiate between blk_io_trace versions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for struct blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: pass blk_user_trace2 to setup functions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for blk_user_trace_setup2 (Ming Lei) [RHEL-144763]
  - blktrace: split do_blk_trace_setup into two functions (Ming Lei) [RHEL-144763]
  - blktrace: change the internal action to 64bit (Ming Lei) [RHEL-144763]
  - blktrace: untangle if/else sequence in __blk_add_trace (Ming Lei) [RHEL-144763]
  - blktrace: split out relaying a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: factor out recording a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: only calculate trace length once (Ming Lei) [RHEL-144763]
  - block: rename min_segment_size (Ming Lei) [RHEL-144763]
  - blk-mq: use struct_size() in kmalloc() (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Switch back to a single dispatch list (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Introduce dd_start_request() (Ming Lei) [RHEL-144763]
  - nvme-multipath: fix lockdep WARN due to partition scan work (Ming Lei) [RHEL-144763]
  - MAINTAINERS: correct git location for block layer tree (Ming Lei) [RHEL-144763]
  - null_blk: set dma alignment to logical block size (Ming Lei) [RHEL-144763]
  - blk-crypto: use BLK_STS_INVAL for alignment errors (Ming Lei) [RHEL-144763]
  - block: make REQ_OP_ZONE_OPEN a write operation (Ming Lei) [RHEL-144763]
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Ming Lei) [RHEL-144763]
  - nvme-pci: use blk_map_iter for p2p metadata (Ming Lei) [RHEL-144763]
  - block: require LBA dma_alignment when using PI (Ming Lei) [RHEL-144763]
  - block: Remove elevator_lock usage from blkg_conf frozen operations (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - loop: remove redundant __GFP_NOWARN flag (Ming Lei) [RHEL-144763]
  - block: move bio_iov_iter_get_bdev_pages to block/fops.c (Ming Lei) [RHEL-144763]
  - iomap: open code bio_iov_iter_get_bdev_pages (Ming Lei) [RHEL-144763]
  - block: rename bio_iov_iter_get_pages_aligned to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: remove bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: Update a comment of disk statistics (Ming Lei) [RHEL-144763]
  - s390/dasd: enforce dma_alignment to ensure proper buffer validation (Ming Lei) [RHEL-144763]
  - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request (Ming Lei) [RHEL-144763]
  - ublk: remove redundant zone op check in ublk_setup_iod() (Ming Lei) [RHEL-144763]
  - nvme: Use non zero KATO for persistent discovery connections (Ming Lei) [RHEL-144763]
  - nvmet: add safety check for subsys lock (Ming Lei) [RHEL-144763]
  - nvme-core: use nvme_is_io_ctrl() for I/O controller check (Ming Lei) [RHEL-144763]
  - nvme-core: do ioccsz/iorcsz validation only for I/O controllers (Ming Lei) [RHEL-144763]
  - nvme-core: add method to check for an I/O controller (Ming Lei) [RHEL-144763]
  - blk-mq: Fix more tag iteration function documentation (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix behavior when fio is not installed (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_unmap_io() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_io to __ublk_complete_rq() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_need_complete_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_commit_and_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_config_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_fetch_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass q_id and tag to __ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_daemon_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_device to ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_ch_uring_cmd_local() (Ming Lei) [RHEL-144763]
  - ublk: add helpers to check ublk_device flags (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to __ublk_fail_req() (Ming Lei) [RHEL-144763]
  - ublk: don't pass q_id to ublk_queue_cmd_buf_size() (Ming Lei) [RHEL-144763]
  - ublk: remove ubq check in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - selftests: ublk: add test to verify that feat_map is complete (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: add UBLK_F_BUF_REG_OFF_DAEMON to feat_map (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: simplify feat_map definition (Ming Lei) [RHEL-144763]
  - blk-throttle: fix throtl_data leak during disk release (Ming Lei) [RHEL-144763]
  - blk-mq: Fix the blk_mq_tagset_busy_iter() documentation (Ming Lei) [RHEL-144763]
  - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Remove the redundant rb_entry_rq in the deadline_from_pos(). (Ming Lei) [RHEL-144763]
  - nvme-fc: use lock accessing port_state and rport state (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: call done callback even when remote port is gone (Ming Lei) [RHEL-144763]
  - nvmet-fc: avoid scheduling association deletion twice (Ming Lei) [RHEL-144763]
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale nr_requests documentation (Ming Lei) [RHEL-144763]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-144763]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-144763]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-144763]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-144763]
  - ublk: consolidate nr_io_ready and nr_queues_ready (Ming Lei) [RHEL-144763]
  - block: fix ordering of recursive split IO (Ming Lei) [RHEL-144763]
  - block: skip unnecessary checks for split bio (Ming Lei) [RHEL-144763]
  - blk-crypto: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - block: factor out a helper bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - blk-crypto: fix missing blktrace bio split events (Ming Lei) [RHEL-144763]
  - blk-mq: add QUEUE_FLAG_BIO_ISSUE_TIME (Ming Lei) [RHEL-144763]
  - block: initialize bio issue time in blk_mq_submit_bio() (Ming Lei) [RHEL-144763]
  - block: cleanup bio_issue (Ming Lei) [RHEL-144763]
  - blk-map: provide the bdev to bio if one exists (Ming Lei) [RHEL-144763]
  - blk-mq-dma: bring back p2p request flags (Ming Lei) [RHEL-144763]
  - blk-integrity: enable p2p source and destination (Ming Lei) [RHEL-144763]
  - iov_iter: remove iov_iter_is_aligned (Ming Lei) [RHEL-144763]
  - blk-integrity: use simpler alignment check (Ming Lei) [RHEL-144763]
  - block: remove bdev_iter_is_aligned (Ming Lei) [RHEL-144763]
  - iomap: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: align the bio after building it (Ming Lei) [RHEL-144763]
  - block: add size alignment to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: check for valid bio while splitting (Ming Lei) [RHEL-144763]
  - drivers/block: WQ_PERCPU added to alloc_workqueue users (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_unbound_wq with system_dfl_wq (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_wq with system_percpu_wq (Ming Lei) [RHEL-144763]
  - block: floppy: Replace kmalloc() + copy_from_user() with memdup_user() (Ming Lei) [RHEL-144763]
  - block: remove the bi_inline_vecs variable sized array from struct bio (Ming Lei) [RHEL-144763]
  - block: add a bio_init_inline helper (Ming Lei) [RHEL-144763]
  - blk-throttle: fix access race during throttle policy activation (Ming Lei) [RHEL-144763]
  - null_blk: Fix the description of the cache_size module argument (Ming Lei) [RHEL-144763]
  - ublk: inline __ublk_ch_uring_cmd() (Ming Lei) [RHEL-144763]
  - block: use int to store blk_stack_limits() return value (Ming Lei) [RHEL-144763]
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Ming Lei) [RHEL-144763]
  - floppy: Sort headers alphabetically (Ming Lei) [RHEL-144763]
  - floppy: Replace custom SZ_64K constant (Ming Lei) [RHEL-144763]
  - floppy: Remove unused CROSS_64KB() macro from arch/ code (Ming Lei) [RHEL-144763]
  - block: Move a misplaced comment in queue_wb_lat_store() (Ming Lei) [RHEL-144763]
  - nvme-pci: convert metadata mapping to dma iter (Ming Lei) [RHEL-144763]
  - nvme-pci: create common sgl unmapping helper (Ming Lei) [RHEL-144763]
  - blk-integrity: use iterator for mapping sg (Ming Lei) [RHEL-144763]
  - blk-mq-dma: add scatter-less integrity data DMA mapping (Ming Lei) [RHEL-144763]
  - blk-mq-dma: move common dma start code to a helper (Ming Lei) [RHEL-144763]
  - blk-mq: remove REQ_P2PDMA flag (Ming Lei) [RHEL-144763]
  - blk-mq-dma: require unmap caller provide p2p map type (Ming Lei) [RHEL-144763]
  - blk-mq-dma: provide the bio_vec array being iterated (Ming Lei) [RHEL-144763]
  - blk-mq-dma: create blk_map_iter type (Ming Lei) [RHEL-144763]
  - block: switch ->getgeo() to struct gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch ->bios_param() to passing gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch scsi_bios_ptable() and scsi_partsize() to gendisk (Ming Lei) [RHEL-144763]
  - nvme: fix PI insert on write (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a lockdep complaint about recursive locking (Ming Lei) [RHEL-144763]
  - loop: fix zero sized loop for block special file (Ming Lei) [RHEL-144763]
  - block: tone down bio_check_eod (Ming Lei) [RHEL-144763]
  - loop: use vfs_getattr_nosec for accurate file size (Ming Lei) [RHEL-144763]
  - loop: Consolidate size calculation logic into lo_calculate_size() (Ming Lei) [RHEL-144763]
  - block: remove newlines from the warnings in blk_validate_integrity_limits (Ming Lei) [RHEL-144763]
  - block: handle pi_tuple_size in queue_limits_stack_integrity (Ming Lei) [RHEL-144763]
  - fs: add ioctl to query metadata and protection info capabilities (Ming Lei) [RHEL-144763]
  - nvme: set pi_offset only when checksum type is not BLK_INTEGRITY_CSUM_NONE (Ming Lei) [RHEL-144763]
  - block: introduce pi_tuple_size field in blk_integrity (Ming Lei) [RHEL-144763]
  - block: rename tuple_size field in blk_integrity to metadata_size (Ming Lei) [RHEL-144763]
  - block: always allocate integrity buffer when required (Ming Lei) [RHEL-144763]
  - Docs: admin-guide: Correct spelling mistake (Ming Lei) [RHEL-144763]
  - blk-wbt: doc: Update the doc of the wbt_lat_usec interface (Ming Lei) [RHEL-144763]
  - blk-wbt: Eliminate ambiguity in the comments of struct rq_wb (Ming Lei) [RHEL-144763]
  - blk-wbt: Optimize wbt_done() for non-throttled writes (Ming Lei) [RHEL-144763]
  - blk-cgroup: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - block, bfq: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - drbd: Remove the open-coded page pool (Ming Lei) [RHEL-144763]
  - nvmet: exit debugfs after discovery subsystem exits (Ming Lei) [RHEL-144763]
  - block, bfq: Reorder struct bfq_iocq_bfqq_data (Ming Lei) [RHEL-144763]
  - block: ensure discard_granularity is zero when discard is not supported (Ming Lei) [RHEL-144763]
  - block: Fix default IO priority if there is no IO context (Ming Lei) [RHEL-144763]
  - nvme: fix various comment typos (Ming Lei) [RHEL-144763]
  - nvme-pci: fix leak on sgl setup error (Ming Lei) [RHEL-144763]
  - nvmet: initialize discovery subsys after debugfs is initialized (Ming Lei) [RHEL-144763]
  - nvme: add capability to connect to an administrative controller (Ming Lei) [RHEL-144763]
  - nvmet: add support for FDP in fabrics passthru path (Ming Lei) [RHEL-144763]
  - blk-ioc: don't hold queue_lock for ioc_lookup_icq() (Ming Lei) [RHEL-144763]
  - block: Enforce power-of-2 physical block size (Ming Lei) [RHEL-144763]
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (Ming Lei) [RHEL-144763]
  - block: Improve read ahead size for rotational devices (Ming Lei) [RHEL-144763]
  - cdrom: Call cdrom_mrw_exit from cdrom_release function (Ming Lei) [RHEL-144763]
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ming Lei) [RHEL-144763]
  - nvme-pci: try function level reset on init failure (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (Ming Lei) [RHEL-144763]
  - nvme: fix typo in status code constant for self-test in progress (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant assignment of error code in nvmet_ns_enable() (Ming Lei) [RHEL-144763]
  - nvme: fix incorrect variable in io cqes error message (Ming Lei) [RHEL-144763]
  - nvme: fix multiple spelling and grammar issues in host drivers (Ming Lei) [RHEL-144763]
  - block: fix blk_zone_append_update_request_bio() kernel-doc (Ming Lei) [RHEL-144763]
  - block: add trace messages to zone write plugging (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blkdev_zone_mgmt (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blk_zone_update_request_bio (Ming Lei) [RHEL-144763]
  - block: split blk_zone_update_request_bio into two functions (Ming Lei) [RHEL-144763]
  - blktrace: add zoned block commands to blk_fill_rwbs (Ming Lei) [RHEL-144763]
  - block: floppy: Fix uninitialized use of outparam (Ming Lei) [RHEL-144763]
  - loop: Avoid updating block size under exclusive owner (Ming Lei) [RHEL-144763]
  - nvme-pci: don't allocate dma_vec for IOVA mappings (Ming Lei) [RHEL-144763]
  - drbd: add missing kref_get in handle_write_conflicts (Ming Lei) [RHEL-144763]
  - block: mtip32xx: Fix usage of dma_map_sg() (Ming Lei) [RHEL-144763]
  - nvme-pci: fix dma unmapping when using PRPs and not using the IOVA mapping (Ming Lei) [RHEL-144763]
  - zram: pass buffer offset to zcomp_available_show() (Ming Lei) [RHEL-144763]
  - block: zram: replace scnprintf() with sysfs_emit() in *_show() functions (Ming Lei) [RHEL-144763]
  - virtio: blk/scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - nvme-pci: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - lib/group_cpus: Let group_cpu_evenly() return the number of initialized masks (Ming Lei) [RHEL-144763]
  - nvme-pci: rework the build time assert for NVME_MAX_NR_DESCRIPTORS (Ming Lei) [RHEL-144763]
  - nvme-pci: replace NVME_MAX_KB_SZ with NVME_MAX_BYTE (Ming Lei) [RHEL-144763]
  - nvme-pci: convert the data mapping to blk_rq_dma_map (Ming Lei) [RHEL-144763]
  - nvme-pci: remove superfluous arguments (Ming Lei) [RHEL-144763]
  - nvme-pci: merge the simple PRP and SGL setup into a common helper (Ming Lei) [RHEL-144763]
  - nvme-pci: refactor nvme_pci_use_sgls (Ming Lei) [RHEL-144763]
  - block: add scatterlist-less DMA mapping helpers (Ming Lei) [RHEL-144763]
  - block: don't merge different kinds of P2P transfers in a single bio (Ming Lei) [RHEL-144763]
  - block: Increase BLK_DEF_MAX_SECTORS_CAP (Ming Lei) [RHEL-144763]
  - block/bdev: lift block size restrictions to 64k (Ming Lei) [RHEL-144763]
  - block/bdev: enable large folio support for large logical block sizes (Ming Lei) [RHEL-144763]
  - fs/buffer fs/mpage: remove large folio restriction (Ming Lei) [RHEL-144763]
  - fs/mpage: use blocks_per_folio instead of blocks_per_page (Ming Lei) [RHEL-144763]
  - fs/mpage: avoid negative shift for large blocksize (Ming Lei) [RHEL-144763]
  - fs/buffer: remove batching from async read (Ming Lei) [RHEL-144763]
  - fs/buffer: simplify block_read_full_folio() with bh_offset() (Ming Lei) [RHEL-144763]
  - block: don't autoload drivers on stat (Ming Lei) [RHEL-144763]
  - platform/x86/amd/pmf: Use ring buffer to store custom BIOS input values (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Add BIOS_INPUTS_MAX macro to replace hardcoded array size (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Use explicit SET_CMD/GET_CMD flags in amd_pmf_send_cmd() (Steve Best) [RHEL-130539]
  - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - crypto: ccp - Factor out ring destroy handling to a helper (Steve Best) [RHEL-130538]
  - crypto: ccp - Add an S4 restore flow (Steve Best) [RHEL-130538]
  - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - platform/x86/amd/pmf: Prevent TEE errors after hibernate (Steve Best) [RHEL-130538]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-152916]
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-152916]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-215.el10]
changelog:
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski) [RHEL-132213]
  - tcp: reclaim 8 bytes in struct request_sock_queue (Guillaume Nault) [RHEL-123211]
  - tcp: move mtu_info to remove two 32bit holes (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp_clean_acked to tcp_sock_read_tx group (Guillaume Nault) [RHEL-123211]
  - tcp: move recvmsg_inq to tcp_sock_read_txrx (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp->rcv_tstamp to tcp_sock_write_txrx group (Guillaume Nault) [RHEL-123211]
  - tcp: remove CACHELINE_ASSERT_GROUP_SIZE() uses (Guillaume Nault) [RHEL-123211]
  - net: move sk->sk_err_soft and sk->sk_sndbuf (Guillaume Nault) [RHEL-123211]
  - net: move sk_uid and sk_protocol to sock_read_tx (Guillaume Nault) [RHEL-123211]
  - tcp: move icsk_clean_acked to a better location (Guillaume Nault) [RHEL-123211]
  - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Jan Stancek) [RHEL-132871]
  - timekeeping: Fix timex status validation for auxiliary clocks (Waiman Long) [RHEL-152433]
  - time/sched_clock: Use ACCESS_PRIVATE() to evaluate hrtimer::function (Waiman Long) [RHEL-152433]
  - hrtimer: Fix trace oddity (Waiman Long) [RHEL-152433]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Waiman Long) [RHEL-152433]
  - timekeeping: Adjust the leap state for the correct auxiliary timekeeper (Waiman Long) [RHEL-152433] {CVE-2026-23106}
  - hrtimer: Fix softirq base check in update_needs_ipi() (Waiman Long) [RHEL-152433]
  - time: Fix a few typos in time[r] related code comments (Waiman Long) [RHEL-152433]
  - timers/migration: Remove dead code handling idle CPU checking for remote timers (Waiman Long) [RHEL-152433]
  - timers/migration: Remove unused "cpu" parameter from tmigr_get_group() (Waiman Long) [RHEL-152433]
  - timers/migration: Assert that hotplug preparing CPU is part of stable active hierarchy (Waiman Long) [RHEL-152433]
  - timers/migration: Fix imbalanced NUMA trees (Waiman Long) [RHEL-152433]
  - timers/migration: Remove locking on group connection (Waiman Long) [RHEL-152433]
  - timers/migration: Convert "while" loops to use "for" (Waiman Long) [RHEL-152433]
  - timekeeping: Fix error code in tk_aux_sysfs_init() (Waiman Long) [RHEL-152433]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-152433] {CVE-2025-68214}
  - timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths (Waiman Long) [RHEL-152433]
  - tick/sched: Fix bogus condition in report_idle_softirq() (Waiman Long) [RHEL-152433]
  - timekeeping: Fix aux clocks sysfs initialization loop bound (Waiman Long) [RHEL-152433]
  - time: export timespec64_add_safe() symbol (Waiman Long) [RHEL-152433]
  - time: Build generic update_vsyscall() only with generic time vDSO (Waiman Long) [RHEL-152433]
  - time/sched_clock: Export symbol for sched_clock register function (Waiman Long) [RHEL-152433]
  - time: Fix spelling mistakes in comments (Waiman Long) [RHEL-152433]
  - clocksource: Print durations for sync check unconditionally (Waiman Long) [RHEL-152433]
  - hrtimer: Reorder branches in hrtimer_clockid_to_base() (Waiman Long) [RHEL-152433]
  - hrtimer: Remove hrtimer_clock_base:: Get_time (Waiman Long) [RHEL-152433]
  - hrtimer: Use hrtimer_cb_get_time() helper (Waiman Long) [RHEL-152433]
  - media: pwm-ir-tx: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - lib: test_objpool: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - sched/core: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - timers/itimer: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - posix-timers: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - jiffies: Remove obsolete SHIFTED_HZ comment (Waiman Long) [RHEL-152433]
  - copy_process: pass clone_flags as u64 across calltree (Waiman Long) [RHEL-152433]
  - hrtimers: Unconditionally update target CPU base after offline timer migration (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Avoid slow division loop in auxiliary clock update (Waiman Long) [RHEL-152433]
  - clocksource: Improve randomness in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - cpumask: introduce cpumask_random() (Waiman Long) [RHEL-152433]
  - bitmap: generalize node_random() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Update auxiliary clock data in the datapage (Waiman Long) [RHEL-152433]
  - vdso: Introduce aux_clock_resolution_ns() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Split up __arch_update_vsyscall() into __arch_update_vdso_clock() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Introduce a helper to fill clock configurations (Waiman Long) [RHEL-152433]
  - timekeeping: Remove the temporary CLOCK_AUX workaround (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_clock_ts64() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide interface to control auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide update for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Provide adjtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare do_adtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Make do_adjtimex() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Add auxiliary clock support to __timekeeping_inject_offset() (Waiman Long) [RHEL-152433]
  - timekeeping: Make timekeeping_inject_offset() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time setter for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Add minimal posix-timers support for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time getters for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Update auxiliary timekeepers on clocksource change (Waiman Long) [RHEL-152433]
  - timekeeping: Add AUX offset to struct timekeeper (Waiman Long) [RHEL-152433]
  - ntp: Use ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Add clock_valid flag to timekeeper (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare timekeeping_update_from_shadow() (Waiman Long) [RHEL-152433]
  - timekeeping: Make __timekeeping_advance() reusable (Waiman Long) [RHEL-152433]
  - ntp: Rename __do_adjtimex() to ntp_adjtimex() (Waiman Long) [RHEL-152433]
  - ntp: Add timekeeper ID arguments to public functions (Waiman Long) [RHEL-152433]
  - ntp: Add support for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - redhat/configs: Add CONFIG_POSIX_AUX_CLOCKS=n (Waiman Long) [RHEL-152433]
  - time: Introduce auxiliary POSIX clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce timekeeper ID (Waiman Long) [RHEL-152433]
  - timekeeping: Avoid double notification in do_adjtimex() (Waiman Long) [RHEL-152433]
  - timekeeping: Cleanup kernel doc of __ktime_get_real_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Remove hardcoded access to tk_core (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_next_wrap() in clocksource_watchdog() (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_any_but() in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - timers/migration: Clean up the loop in tmigr_quick_check() (Waiman Long) [RHEL-152433]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Myron Stowe) [RHEL-143320]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Myron Stowe) [RHEL-143320]
  - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads (Myron Stowe) [RHEL-143320]
  - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mete Durlu) [RHEL-155896]
  - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix missing error handling for tx_queue (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Use macro instead of hard coded value (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support 2G message size (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support extended stats for Thor2 VF (Sreekanth Reddy) [RHEL-108694]
  - selftests: net: tests for add double tunneling GRO/GSO (Guillaume Nault) [RHEL-145367]
  - geneve: use GRO hint option in the RX path (Guillaume Nault) [RHEL-145367]
  - geneve: extract hint option at GRO stage (Guillaume Nault) [RHEL-145367]
  - geneve: add GRO hint output path (Guillaume Nault) [RHEL-145367]
  - geneve: pass the geneve device ptr to geneve_build_skb() (Guillaume Nault) [RHEL-145367]
  - geneve: constify geneve_hlen() (Guillaume Nault) [RHEL-145367]
  - geneve: add netlink support for GRO hint (Guillaume Nault) [RHEL-145367]
  - vxlan: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - geneve: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - net: introduce mangleid_features (Guillaume Nault) [RHEL-145367]
  - geneve, specs: Add port range to rt_link specification (Guillaume Nault) [RHEL-145367]
  - geneve: Allow users to specify source port range (Guillaume Nault) [RHEL-145367]
  - selftests: forwarding: lib: Move require_command to net, generalize (Guillaume Nault) [RHEL-145367]
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Desnes Nunes) [RHEL-147788]
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Desnes Nunes) [RHEL-147788] {CVE-2025-68331}
  - xhci: dbgtty: fix device unregister: fixup (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: fix device unregister (Desnes Nunes) [RHEL-147788]
  - usb: storage: sddr55: Reject out-of-bound new_pba (Desnes Nunes) [RHEL-147788] {CVE-2025-40345}
  - USB: serial: option: add support for Rolling RW101R-GL (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: Sort out the Intel device IDs (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: add support for the Intel Nova Lake -S (Desnes Nunes) [RHEL-147788]
  - drivers/usb/dwc3: fix PCI parent check (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: Fix race condition in sideband unregister (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Desnes Nunes) [RHEL-147788]
  - xhci: fix stale flag preventig URBs after link state error is cleared (Desnes Nunes) [RHEL-147788]
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: Fix double resource release in cdns3_pci_probe (Desnes Nunes) [RHEL-147788]
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Desnes Nunes) [RHEL-147788] {CVE-2025-68282}
  - USB: serial: option: add Telit FN920C04 ECM compositions (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add Quectel RG255C (Desnes Nunes) [RHEL-147788]
  - tcpm: allow looking for role_sw device in the main node (Desnes Nunes) [RHEL-147788]
  - tcpm: switch check for role_sw device with fw_node (Desnes Nunes) [RHEL-147788]
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add UNISOC UIS7720 (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: Fix USB2-only root hub registration (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: switch: split out ports definition (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: gs101: require Type-C properties (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: add blank lines between DT properties (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Don't call clk_bulk_disable_unprepare() twice (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Desnes Nunes) [RHEL-147788]
  - usb: vhci-hcd: Prevent suspending virtually attached devices (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add SIMCom 8230C compositions (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Fix use-after-free in tb_dp_dprx_work (Desnes Nunes) [RHEL-147788] {CVE-2025-40002}
  - docs: driver-api: fix spelling of "buses". (Desnes Nunes) [RHEL-147788]
  - usb: xhci: align PORTSC trace with one-based port numbering (Desnes Nunes) [RHEL-147788]
  - usb: xhci: correct indentation for PORTSC tracing function (Desnes Nunes) [RHEL-147788]
  - usb: xhci: improve TR Dequeue Pointer mask (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: add support for hosts with zero USB3 ports (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Update a comment about Stop Endpoint retries (Desnes Nunes) [RHEL-147788]
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" (Desnes Nunes) [RHEL-147788]
  - USB: gadget: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Introduce free_usb_request helper (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Store endpoint pointer in usb_request (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Add Renesas RZ/G3E USB3 Host driver support (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-plat: Add .post_resume_quirk for struct xhci_plat_priv (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Move R-Car reg definitions (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Document Renesas RZ/G3E USB3HOST (Desnes Nunes) [RHEL-147788]
  - phy: fsl-imx8mq-usb: fix typec orientation switch when built as module (Desnes Nunes) [RHEL-147788]
  - usb: typec: Stub out typec_switch APIs when CONFIG_TYPEC=n (Desnes Nunes) [RHEL-147788]
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Desnes Nunes) [RHEL-147788]
  - redhat/configs: configs: riscv: Enable dwc3 on riscv for RHEL (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Enable DWC3 Generic Platform Driver on RHEL automotive (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: add generic driver to support flattened (Desnes Nunes) [RHEL-147788]
  - clk: Provide devm_clk_bulk_get_all_enabled() helper (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3: add support for SpacemiT K1 (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update thunderbolt.h header file (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update xdomain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tmu.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in tb.h (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update switch.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update retimer.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update property.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update path.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nvm.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in nhi_regs.h ring_desc structure (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nhi.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update lc.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update eeprom.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update domain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update dma_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in ctl.h tb_cfg_request struct (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update ctl.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update clx.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update cap.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update acpi.c function documentation (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Handle mode transitions for CD321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read data status in probe and cache its value (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Use read_power_status function in probe (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Update partner identity when power status was updated (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Register DisplayPort and Thunderbolt altmodes for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read USB4, Thunderbolt and DisplayPort status for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Add cd321x struct with separate size (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Trace data status for CD321x correctly (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move switch_power_state to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move initial irq mask to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Clear interrupts first (Desnes Nunes) [RHEL-147788]
  - usb: host: enable USB offload during system sleep (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: add api to trace sideband usage (Desnes Nunes) [RHEL-147788]
  - usb: offload: add apis for offload usage tracking (Desnes Nunes) [RHEL-147788]
  - usb: xhci-plat: separate dev_pm_ops for each pm_event (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Implement glue callbacks to facilitate runtime suspend (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: core: Introduce glue callbacks for flattened implementations (Desnes Nunes) [RHEL-147788]
  - usb: host: tegra: Remove manual wake IRQ disposal (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-tegra: Use platform_get_irq_optional() for wake IRQs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: tegra: Support USB wakeup function for Tegra234 (Desnes Nunes) [RHEL-147788]
  - usb: udc: Add trace event for usb_gadget_set_state (Desnes Nunes) [RHEL-147788]
  - usb: dwc2: Add support for 'maximum-speed' property (Desnes Nunes) [RHEL-147788]
  - usb: typec: tcpci: add wakeup support (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: linux,extcon-usb-gpio: GPIO must be provided (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Adding CONFIG_EXTCON_MAX14526 (Desnes Nunes) [RHEL-147788]
  - extcon: max14526: depends on I2C to prevent build warning/errors (Desnes Nunes) [RHEL-147788]
  - extcon: Add basic support for Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: Document Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - usb: core: support eUSB2 double bandwidth large isoc URB frames (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Add host support for eUSB2 double isochronous bandwidth devices (Desnes Nunes) [RHEL-147788]
  - usb: core: Introduce usb_endpoint_is_hs_isoc_double() (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Use usb_endpoint_max_periodic_payload() (Desnes Nunes) [RHEL-147788]
  - usb: core: Add a function to get USB version independent periodic payload (Desnes Nunes) [RHEL-147788]
  - usb: core: eUSB2 companion descriptor is for isoc IN endpoints only (Desnes Nunes) [RHEL-147788]
  - usb: core: Parse eUSB2 companion descriptors for high speed devices only (Desnes Nunes) [RHEL-147788]
  - usb: core: Use le16_to_cpu() to read __le16 value in usb_parse_endpoint() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add check for UCSI version (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Desnes Nunes) [RHEL-147788] {CVE-2025-40314}
  - usb: host: xhci-tegra: Remove redundant ternary operators (Desnes Nunes) [RHEL-147788]
  - cdnsp: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns3: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns2: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - usb: gadget: configfs: Correctly set use_os_string at bind (Desnes Nunes) [RHEL-147788]
  - tools/usb/usbip: fix spelling mistakes in usbipd.c (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: IXP4xx UDC bindings (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Refactor dwc3_mode_show (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Add trace event for dwc3_set_prtcap (Desnes Nunes) [RHEL-147788]
  - usb: storage: realtek_cr: Simplify residue calculation in rts51x_bulk_transport() (Desnes Nunes) [RHEL-147788]
  - usb: misc: Update link to EHSET pdf doc (Desnes Nunes) [RHEL-147788]
  - usb: usblp: Use min_t() to improve usblp_read() (Desnes Nunes) [RHEL-147788]
  - USB: serial: oti6858: remove extranenous ; after comment (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use string choices helpers (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: use modern PM macros (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: Fix uninitialized variable issue (Desnes Nunes) [RHEL-147788]
  - Documentation: driver-api: usb: Limit toctree depth (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: register a typec mux to change the QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: introduce QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: store DP phy power state (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: Rename 'mode' to 'phy_mode' (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Reference usb-switch.yaml to allow mode-switch (Desnes Nunes) [RHEL-147788]
  - phy: remove unneeded 'fast_io' parameter in regmap_config (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb card reader: add OCP support (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Desnes Nunes) [RHEL-147788]
  - memstick: Add timeout to prevent indefinite waiting (Desnes Nunes) [RHEL-147788]
  - misc: rtsx_pci: Add separate CD/WP pin polarity reversal support (Desnes Nunes) [RHEL-147788]
  - phy: qcom-qmp-pcie: add dual lane PHY support for SM8750 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the SM8750 QMP PCIe PHY Gen3 x2 (Desnes Nunes) [RHEL-147788]
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Desnes Nunes) [RHEL-147788]
  - USB: Check no positive return values from pm_runtime_resume_and_get() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add support for READ_POWER_LEVEL command (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Drop duplicate nvidia,tegra20-ehci.txt (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Remove extcon functionality from glue layer (Desnes Nunes) [RHEL-147788]
  - USB: lower "Device is not authorized for usage" message to info (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Add shutdown handler (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use Linux Foundation IDs for XDomain discovery (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: hisilicon: hi6220-usb: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: enable compile testing (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: fsl,imx8mq-usb: Drop 'db' suffix duplicating dtschema (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Compare HMAC values in constant time (Desnes Nunes) [RHEL-147788]
  - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Desnes Nunes) [RHEL-147788]
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157444]
  - ALSA: hda/tas2781: Ignore reset check for SPI device (CKI Backport Bot) [RHEL-148197]
  - platform/x86/intel/hid: Add Nova Lake support (Steve Best) [RHEL-117305]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
  - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800]
  - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521]
  - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521]
  - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-216.el10]
changelog:
  - redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
  - net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
  - mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
  - mpls: Protect net->mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
  - mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
  - mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
  - mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
  - neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
  - sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
  - rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
  - net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
  - ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
  - net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
  - net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
  - neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Protect tbl->phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
  - neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
  - neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
  - net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
  - net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
  - net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
  - ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
  - net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
  - net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
  - ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
  - ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
  - inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
  - ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
  - net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect nh->f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
  - ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
  - ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
  - ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate rt->fib6_nh->rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - net: Remove ->exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
  - geneve: Convert geneve_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bareudp: Convert bareudp_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bonding: Convert bond_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bridge: Convert br_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert tunnel devices' ->exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - vxlan: Convert vxlan_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert nexthop_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - net: Add ->exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
  - net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
  - net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
  - inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
  - net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
  - dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
  - net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
  - arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
  - net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
  - net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
  - net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
  - dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
  - dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
  - net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
  - dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
  - can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move ops->validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
  - net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
  - ipmr: use READ_ONCE() to read net->ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
  - ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table->fib_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: use READ_ONCE()/WRITE_ONCE() on net->ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
  - fib: rules: use READ_ONCE()/WRITE_ONCE() on ops->fib_rules_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
  - ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
  - ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
  - ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
  - cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
  - cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
  - cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
  - cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
  - cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
  - selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
  - cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
  - Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-113305]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
  - cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
  - cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
  - cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
  - cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
  - cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
  - cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
  - cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
  - cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
  - docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
  - cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
  - selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
  - cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
  - cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
  - cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
  - cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
  - selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
  - Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
  - llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
  - sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
  - cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
  - cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
  - cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
  - cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
  - cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
  - cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
  - cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
  - cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
  - cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
  - cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
  - cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
  - mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
  - cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
  - cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
  - cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
  - cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
  - mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
  - blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
  - cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
  - cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
  - mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
  - RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
  - cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
  - cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
  - cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
  - cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
  - firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
  - include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
  - include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
  - arm_scmi: don't mess with ->d_parent->d_name (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
  - firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
  - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
  - redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
  - i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
  - i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
  - tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
  - tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
  - fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
  - tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
  - function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
  - tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
  - tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
  - x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
  - tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
  - tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
  - tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
  - tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
  - selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
  - tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
  - tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
  - fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
  - fgraph: Initialize ftrace_ops->private for function graph ops (Jerome Marchand) [RHEL-151695]
  - ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
  - tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
  - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
  - selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
  - tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
  - tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
  - ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
  - ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
  - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
  - tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
  - ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
  - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
  - selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
  - selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
  - tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
  - Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
  - arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
  - atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
  - fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
  - tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
  - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
  - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
  - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
  - ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
  - docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
  - tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
  - ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
  - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
  - md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
  - md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
  - block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
  - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
  - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
  - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
  - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
  - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
  - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
  - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
  - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
  - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
  - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
  - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
  - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
  - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
  - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
  - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
  - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
  - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
  - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
  - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
  - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
  - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
  - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
  - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
  - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
  - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
  - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-217.el10]
changelog:
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
  - smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
  - ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
  - add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
  - selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
  - net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
  - net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
  - net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
  - net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
  - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
  - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
  - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
  - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
  - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
  - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
  - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
  - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-218.el10]
changelog:
  - x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
  - PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
  - PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
  - PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
  - PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
  - PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
  - PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
  - sparc/PCI: Correct 64-bit non-pref -> pref BAR resources (Myron Stowe) [RHEL-139968]
  - PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
  - PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
  - MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
  - MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
  - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
  - PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
  - PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
  - PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
  - PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
  - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
  - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation (Myron Stowe) [RHEL-139968]
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
  - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
  - PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
  - PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
  - PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
  - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
  - PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
  - PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
  - PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
  - PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
  - PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
  - PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
  - dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
  - PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
  - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
  - PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
  - PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
  - PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
  - PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
  - PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
  - PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
  - PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
  - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
  - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
  - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
  - selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
  - misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
  - misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
  - PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
  - dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
  - dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
  - PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
  - PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
  - PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
  - PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
  - PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
  - PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
  - PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
  - PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
  - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
  - PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
  - PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
  - PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
  - PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
  - PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
  - PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
  - PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
  - PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
  - PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
  - PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
  - PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
  - PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
  - PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
  - PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
  - PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
  - PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
  - PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
  - PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
  - PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
  - PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
  - PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
  - PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
  - MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
  - sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
  - m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
  - PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
  - PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
  - PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
  - PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
  - PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
  - PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
  - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
  - PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
  - PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
  - PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
  - PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
  - PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
  - PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
  - PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
  - Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
  - PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
  - PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
  - PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
  - powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
  - s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
  - PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
  - PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
  - PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
  - PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
  - PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
  - MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
  - PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]


