# changelog

author: Jan Stancek <jstancek@redhat.com> [6.12.0-32.el10]
changelog:
  - selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov) [RHEL-48593]
  - redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik) [RHEL-48593]
  - redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik) [RHEL-48593]
  - redhat/spec: Do not use source fortification for selftests (Viktor Malik) [RHEL-48593]
  - redhat/spec: Fix BPF selftests build with PIE (Viktor Malik) [RHEL-48593]
  - redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov) [RHEL-48593]
  - selftests/bpf: Allow building with extra flags (Viktor Malik) [RHEL-48593]
  - selftests/bpf: Disable warnings on unused flags for Clang builds (Viktor Malik) [RHEL-48593]
  - bpftool: Prevent setting duplicate _GNU_SOURCE in Makefile (Viktor Malik) [RHEL-48593]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-33.el10]
changelog:
  - redhat: Re-enable CONFIG_INFINIBAND_VMWARE_PVRDMA for x86 (Vitaly Kuznetsov) [RHEL-41133]
  - HID: hyperv: streamline driver probe to avoid devres issues (Vitaly Kuznetsov) [RHEL-67329]
  - powerpc: security: Lock down the kernel if booted in secure boot mode (Mamatha Inamdar) [RHEL-57024]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-34.el10]
changelog:
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Jerry Snitselaar) [RHEL-67995]
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Fix typo "accelaration" (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Constify struct pm_status_row (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove faulty arbiter config reset (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-23197]
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Documentation: Mention --deepest-idle-state (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for hist (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for top (Tomas Glozar) [RHEL-40744]
  - rtla/utils: Add idle state disabling via libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Add optional dependency on libcpupower (Tomas Glozar) [RHEL-40744]
  - tools/build: Add libcpupower dependency detection (Tomas Glozar) [RHEL-40744]
  - mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [RHEL-67445]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-35.el10]
changelog:
  - redhat: gating.yaml: drop unstable test (Jan Stancek)
  - CI: provide pipelines for automotive variant (Julio Faracco)
  - fadump: reserve param area if below boot_mem_top (Mamatha Inamdar) [RHEL-67986]
  - powerpc/fadump: allocate memory for additional parameters early (Mamatha Inamdar) [RHEL-67986]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Steve Best) [RHEL-70009]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-60525]
  - RHEL: disable the btt driver (Jeff Moyer) [RHEL-68504]
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Alex Williamson) [RHEL-69745]
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-68542]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-36.el10]
changelog:
  - configs: synchronize CONFIG_HP_ILO between flavors & enable on x86/arm (Charles Mirabile) [RHEL-65590]
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70652]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (Thomas Huth) [RHEL-69815]
  - fsnotify: fix sending inotify event with unexpected filename (Ian Kent) [RHEL-68847]
  - Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: decouple basic ANA log page re-read support from native multipathing" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: nvme_mpath_init remove multipath check" (Benjamin Marzinski) [RHEL-68140]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-37.el10]
changelog:
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69747]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69747]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69737]
  - RHEL-only: mark ublk as tech preview (Ming Lei) [RHEL-50740]
  - Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" (Ming Lei) [RHEL-67720]
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-70861]
  - loop: fix type of block size (Ming Lei) [RHEL-65631]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70901]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70901]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70901]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70901]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70901]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix replenish_dl_new_period dl_server condition (Phil Auld) [RHEL-70901]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-69932]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69739]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22703]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22703]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-38.el10]
changelog:
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Cindy Lu) [RHEL-56981]
  - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize (Cindy Lu) [RHEL-56981]
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() (Cindy Lu) [RHEL-56981]
  - virtio_net: correct netdev_tx_reset_queue() invocation point (Cindy Lu) [RHEL-56981]
  - intel_idle: add Granite Rapids Xeon D support (David Arcari) [RHEL-68122]
  - sched/dlserver: Fix dlserver time accounting (Phil Auld) [RHEL-68342]
  - sched/dlserver: Fix dlserver double enqueue (Phil Auld) [RHEL-68342]
  - sched/fair: Fix NEXT_BUDDY (Phil Auld) [RHEL-68342]
  - sched/fair: Fix sched_can_stop_tick() for fair tasks (Phil Auld) [RHEL-68342]
  - sched/eevdf: More PELT vs DELAYED_DEQUEUE (Phil Auld) [RHEL-68342]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-39.el10]
changelog:
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (Steve Best) [RHEL-66570]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (Steve Best) [RHEL-66570]
  - redhat/configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen) [RHEL-51429]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-54644]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-54644]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-24140]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71374]
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-70278]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-70863]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-72691]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-24143]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-24143]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-24143]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-24143]


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.1-1
changelog:
  - buildah-1.37.1-1.el10
  - update to https://github.com/containers/buildah/releases/tag/v1.37.1
  - Related: RHEL-34195


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Eduard Abdullin <eabdullin@almalinux.org> - 1.79.0-3.alma.2
changelog:
  - Set target_cpu=x86-64-v2 for x86_64_v2 arch in build_rustflags macro
  - Set RUSTC_TARGET_CPU_X86_64 as x86-64-v2 for x86_64_v2 arch


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-10
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-44334]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44338]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44338]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44599]
  - Resolves: RHEL-44334
    ([RHEL-10] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44338
    ([RHEL-10] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44599
    ([rhel-10] fix pylint error and support python 3.12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-11
changelog:
  - ci-Deprecate-the-users-ssh-authorized-keys-property-516.patch [RHEL-45263]
  - ci-docs-Add-deprecated-system_info-to-schema-5168.patch [RHEL-45263]
  - ci-fix-schema-permit-deprecated-hyphenated-keys-under-u.patch [RHEL-45263]
  - Resolves: RHEL-45263
    (Deprecate the users ssh-authorized-keys property and permit deprecated hyphenated keys under users key [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-12
changelog:
  - ci-Support-metalink-in-yum-repository-config-5444.patch [RHEL-44918]
  - ci-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-IPv6-ad.patch [RHEL-35562]
  - Resolves: RHEL-44918
    ([RFE] Support metalink in yum repository config [rhel-10])
  - Resolves: RHEL-35562
    ([RHEL-10] It leaves the ipv6 networking config as blank in NM keyfile when config dhcp ipv6 with customization spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-13
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46874]
  - Resolves: RHEL-46874
    (Suggest to update schema to support metalink [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-14
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49740]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49739]
  - Resolves: RHEL-49740
    ([Cloud-init] [RHEL-10] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49739
    (Support setting mirrorlist in yum repository config [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-15
changelog:
  - ci-cc_disk_setup-add-sgdisk-to-sfdisk-convertion-dictio.patch [RHEL-36093]
  - ci-Get-rid-of-gdisk-dependency.patch [RHEL-36093]
  - Resolves: RHEL-36093
    (Remove cloud-init dependency on obsolete gdisk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-16
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54372]
  - Resolves: RHEL-54372
    ([RHEL10]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-17
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54688]
  - Resolves: RHEL-54688
    ([RHEL 10.0] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-19
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016]
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019]
  - Resolves: RHEL-65016
    (Configuring metric for default gateway is not working [rhel-10])
  - Resolves: RHEL-65019
    (NoCloud - network_config bridges incorrectly configured [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: David Sloboda <david.x.sloboda@oracle.com> - 24.4-3.1
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Craig Guiller <craig.guiller@oracle.com> - 24.4-3.2
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 11-1
changelog:
  - Show SELinux security context in permissions dialog
  - Support changing permissions of enclosed files


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Allow editing multiple file permissions
  - Support uploading files with administrator privileges
  - Add drag 'n drop support


author: Packit <hello@packit.dev> - 311-1
changelog:
  - Allow pasting multiple SSH keys at once in Create VM dialog
  - Fix detaching host device for running VMs


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Packit <hello@packit.dev> - 326-1
changelog:
  - cockpit-pcp package is now obsolete
  - cockpit/ws container: Connect to servers without installed Cockpit
  - cockpit/ws container: Support host specific SSH keys
  - Storage: Support for Stratis filesystem sizes and limits


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Packit <hello@packit.dev> - 336-1
changelog:
  - storage: Implement deletion of multi-device btrfs (rhbz#2352385)
  - storage: Use mdraid metadata version 1.0 when in Anaconda mode (rhbz#2352953)
  - Add a channel capabilities system


author: Packit <hello@packit.dev> - 336.1-1
changelog:
  - storage: Fix passphrase remembering with "Reuse encryption" (rhbz#2354497)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.11-1
changelog:
  - conmon-2.1.11-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.11
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.12-1
changelog:
  - conmon-2.1.12-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.12
  - Related: RHEL-34195


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jindrich Novy <jnovy@redhat.com> - 2:2.231.0-1
changelog:
  - container-selinux-2.231.0-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.231.0
  - Resolves: RHEL-30620


author: Jindrich Novy <jnovy@redhat.com> - 2:2.232.1-1
changelog:
  - container-selinux-2.232.1-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.232.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - container-selinux-2.233.0-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.233.0
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - container-selinux-2.234.2-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.234.2
  - Related: RHEL-67309


author: Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80476


author: Jindrich Novy <jnovy@redhat.com> - 4:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Resolves: RHEL-85671


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-111947


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.62.0-2
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-7.el10
  - Related: RHEL-80817


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Tao Liu <ltao@redhat.com> - 3.0-11
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.14.4-1
changelog:
  - crun-1.14.4-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.14.4
  - Resolves: RHEL-34649 RHEL-30621


author: Jindrich Novy <jnovy@redhat.com> - 1.16-1
changelog:
  - crun-1.16-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.16.1-1
changelog:
  - crun-1.16.1-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.17-1
changelog:
  - crun-1.17-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.17
  - Related: RHEL-58992


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
changelog:
  - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - LEGACY: drop cipher@pkcs12 = SEED-CBC
  - fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  - nss: be stricter with new purposes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
changelog:
  - TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
  - openssh: remove sntrup761x25519-sha512@openssh.com key_exchange


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3
changelog:
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519 and mlkem768secp256r1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008
changelog:
  - alg_lists: mark MLKEM768 kex experimental
  - openssh, libssh: refactor kx maps to use tuples
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: skip warning on --set=FIPS if bootc
  - update-crypto-policies: don't output FIPS warning in fips mode


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250404-1.gitca0e9a5
changelog:
  - openssl: stop generating `openssl` in favour of `opensslcnf`
  - gnutls: support P384-MLKEM1024
  - openssl: specify default key size for req (openssl does not consume it yet)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Pavol Zacik <pzacik@redhat.com> - 1:2.4.9-1
changelog:
  - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
  - RHEL-25804 Rebase CUPS to next upstream version - 2.4.9


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-5
changelog:
  - Adapt the tests to a crypto policy without SHA-1 (RHEL-50218)
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671).


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-6
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-7
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Pavel Valena <pvalena@redhat.com> - 101-1
changelog:
  - Update to dracut 101.
  - Remove network-legacy module.
  - Additional fixes on top of rebase (see patches).


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-2
changelog:
  - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-45261]
  - Resolves: RHEL-45261
    ([RHEL10] edk2 disconnects abnormally before loading the kernel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45829]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45829]
  - Resolves: RHEL-45829
    ([RHEL-10.0] edk2 hit Failed to generate random data )


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56082]
  - Resolves: RHEL-56082
    ([EDK2] Shim fallback reboot workaround might not work on SNP [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-50185]
  - Resolves: RHEL-50185
    ([RHEL10] Hit soft lockup when hotplug vcpu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56154]
  - Resolves: RHEL-56154
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55302]
  - Resolves: RHEL-55302
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-10.0 beta])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56249]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56249]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60829]
  - Resolves: RHEL-56249
    (507x510 display resolution should not crash the firmware [edk2,rhel-10])
  - Resolves: RHEL-60829
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-11
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - Resolves: RHEL-66234
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-12
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-64642]
  - Resolves: RHEL-64642
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72446]
  - Resolves: RHEL-72446
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-1
changelog:
  - Rebase to edk2-stable202502 [RHEL-75592]
  - Resolves: RHEL-75592
    (rebase to edk2-stable202502)
  - Resulves: RHEL-82646
    (fix typo in fwcfg file name)
  - Resolves: RHEL-82837
    (The newer revocation file and Server 2025 required to update it)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Resolves: RHEL-65061
  - Resolves: RHEL-57504
  - Resolves: RHEL-57492
  - Resolves: RHEL-56750


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-102
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-105425


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.3-106
changelog:
  - Add /var/lib/fapolicyd to tmpfiles
  Resolves: RHEL-104873
  - Allow fapolicyd to connect to systemd-machined
  Resolves: RHEL-77071


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.13.1-7
changelog:
  - lib/all agents: use r"" to avoid SyntaxWarnings 
    Resolves: RHEL-35663
  - fix pycurl bundled path
    Resolves: RHEL-35986


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Resolves: RHEL-64749


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.5.1-1
changelog:
  - Update to 3.5.1 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Eduard Abdullin <eabdullin@almalinux.org> - 15.1.1-2.4.alma.1
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Use glibc32 instead of /usr/lib/libc.so as BuildRequires


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Arjun Shankar <arjun@redhat.com> - 2.39-16
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 7f9f25f255ee2c00178779fbce502f4b94b848b9:
  - Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c
  - x86: Properly set x86 minimum ISA level [BZ #31883]
  - x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867]
  - localedata: ssy_ER: Fix syntax error
  - malloc: New test to check malloc alternate path using memory obstruction
  - malloc: Improve aligned_alloc and calloc test coverage.
  - malloc/Makefile: Split and sort tests
  - x86/cet: fix shadow stack test scripts


author: Arjun Shankar <arjun@redhat.com> - 2.39-21
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 4bdcc1963bc2b5ba5f8e319e402d9eb2cb6096c1:
  - manual: make setrlimit() description less ambiguous
  - manual/stdio: Clarify putc and putwc
  - malloc: add multi-threaded tests for aligned_alloc/calloc/malloc
  - malloc: avoid global locks in tst-aligned_alloc-lib.c
  - resolv: Track single-request fallback via _res._flags (bug 31476)
  - resolv: Do not wait for non-existing second DNS response after error (bug 30081)
  - resolv: Allow short error responses to match any query (bug 31890)
  - elf: Fix localplt.awk for DT_RELR-enabled builds (BZ 31978)
  - Fix usage of _STACK_GROWS_DOWN and _STACK_GROWS_UP defines [BZ 31989]
  - Linux: Make __rseq_size useful for feature detection (bug 31965)
  - elf: Make dl-rseq-symbols Linux only
  - nptl: fix potential merge of __rseq_* relro symbols
  - s390x: Fix segfault in wcsncmp [BZ #31934]
  - stdlib: fix arc4random fallback to /dev/urandom (BZ 31612)
  - math: Provide missing math symbols on libc.a (BZ 31781)
  - math: Fix isnanf128 static build (BZ 31774)
  - math: Fix i386 and m68k exp10 on static build (BZ 31775)
  - math: Fix i386 and m68k fmod/fmodf on static build (BZ 31488)
  - posix: Fix pidfd_spawn/pidfd_spawnp leak if execve fails (BZ 31695)


author: Florian Weimer <fweimer@redhat.com> - 2.39-22
changelog:
  - Support clearing options in /etc/resolv.conf, RES_OPTIONS with a - prefix
  - Introduce the strict-error/RES_STRICTERR stub resolver option (RHEL-18039)


author: Arjun Shankar <arjun@redhat.com> - 2.39-29
changelog:
  - Sync with upstream branch release/2.39/master,
    commit dcaf51b41e259387602774829c45222d0507f90a:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Make tst-strtod-underflow type-generic
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - Add tests of more strtod special cases
  - Add more tests of strtod end pointer
  - Make tst-strtod2 and tst-strtod5 type-generic
  - powerpc64le: Build new strtod tests with long double ABI flags (bug 32145)
  - Do not set errno for overflowing NaN payload in strtod/nan (bug 32045)
  - Improve NaN payload testing
  - Make __strtod_internal tests type-generic
  - Fix strtod subnormal rounding (bug 30220)
  - More thoroughly test underflow / errno in tst-strtod-round
  - Test errno setting on strtod overflow in tst-strtod-round
  - Add tests of fread
  - stdio-common: Add new test for fdopen
  - libio: Attempt wide backup free only for non-legacy code
  - debug: Fix read error handling in pcprofiledump
  - elf: Fix tst-dlopen-tlsreinit1.out test dependency
  - elf: Avoid re-initializing already allocated TLS in dlopen (bug 31717)
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper
  - string: strerror, strsignal cannot use buffer after dlmopen (bug 32026)
  - Define __libc_initial for the static libc
  - x86: Fix bug in strchrnul-evex512 [BZ #32078]
  - Adjust check-local-headers test for libaudit 4.0
  - x32/cet: Support shadow stack during startup for Linux 6.10
  - x86-64: Remove sysdeps/x86_64/x32/dl-machine.h
  - support: Add options list terminator to the test driver
  - manual/stdio: Further clarify putc, putwc, getc, and getwc
  - Fix name space violation in fortify wrappers (bug 32052)
  - resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
  - Add mremap tests
  - mremap: Update manual entry
  - linux: Update the mremap C implementation [BZ #31968]
  - Enhanced test coverage for strncmp, wcsncmp
  - Enhance test coverage for strnlen, wcsnlen


author: Florian Weimer <fweimer@redhat.com> - 2.39-34
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 808a84a8b81468b517a4d721fdc62069cb8c211f:
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86: Avoid integer truncation with large cache sizes (bug 32470)
  - math: Exclude internal math symbols for tests [BZ #32414]
  - malloc: add indirection for malloc(-like) functions in tests [BZ #32366]
  - Pass -nostdlib -nostartfiles together with -r [BZ #31753]
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Arjun Shankar <arjun@redhat.com> - 2.39-40
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-87416)
  - Upstream commit: cff1042cceec3502269947e96cf7023451af22f3
  - CVE-2025-5702: Vector register overwrite bug in glibc (RHEL-95485)
  - elf: Keep using minimal malloc after early DTV resize (RHEL-71923)
  - libio: Fix a deadlock after fork in popen (RHEL-86433)
  - Linux: Switch back to assembly syscall wrapper for prctl (RHEL-82286)
  - Fix missed wakeup in POSIX thread condition variables (RHEL-82285)
  - x86: Detect Intel Diamond Rapids
  - x86: Handle unknown Intel processor with default tuning
  - x86: Add ARL/PTL/CWF model detection support
  - x86: Optimize xstate size calculation
  - x86: Support and fixes for separate non-temporal tunable for memset
  - x86: Fix a crash when running with XSAVEC disabled via tunables (RHEL-84837)
  - x86_64: Add tanh, sinh, and atanh with FMA
  - x86-64: Exclude FMA4 IFUNC functions for -mapxf
  - nptl: clear the whole rseq area before registration
  - math: Improve layout of exp/exp10 data
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - AArch64: Improve codegen for SVE tans and logs
  - AArch64: Improve codegen in AdvSIMD logs, logf function family, and atan(2)(f)
  - AArch64: Simplify rounding-multiply pattern in several AdvSIMD routines
  - aarch64: Avoid redundant MOVs in AdvSIMD F32 logs
  - aarch64: Fix AdvSIMD libmvec routines for big-endian


author: Arjun Shankar <arjun@redhat.com> - 2.39-57
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-109536)
  - Upstream commit: fffc2df8a3e2c8cda2991063d23086360268b777
  - Extend struct r_debug to support multiple namespaces (RHEL-101985)
  - Fix a potential crash in the dynamic loader when processing specific
    symbol versions (RHEL-109683)
  - Signal la_objopen for ld.so with dlmopen (RHEL-109693)
  - Switch to main malloc after final ld.so self-relocation (RHEL-109703)
  - Prevent ld.so from asserting and crashing during audited library loads
    (RHEL-109702)
  - x86-64: Provide GLIBC_ABI_DT_X86_64_PLT symbol version (RHEL-109621)
  - x86-64: Provide GLIBC_ABI_GNU2_TLS symbol version (RHEL-109625)
  - Ensure fallback initialization of ctype TLS data pointers to fix segfaults in
    programs using dlmopen or auditors (RHEL-72018)
  - Handle load segment gaps in _dl_find_object (RHEL-104854)
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]


author: Frédéric Bérat <fberat@redhat.com> - 2.39-64
changelog:
  - Fix `readdir_r` error reporting and `readdir64_r` entry handling, extend `dirent` testing. (RHEL-111120)


author: Frédéric Bérat <fberat@redhat.com> - 2.39-64
changelog:
  - Fix `readdir_r` error reporting and `readdir64_r` entry handling, extend	
    `dirent` testing. (RHEL-111120)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: eabdullin <ed.abdullin.1@gmail.com> - 47.1-2.alma.1
changelog:
  - AlmaLinux changes: Use AlmaLinux icon as activities button Use unbranded
    illustrations Fix Firefox desktop filename in favorites


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-17
changelog:
  - Allows for postgreSQL datasource in selinux policy
  - grafana-cli wrapper script now allows for the gid to be 0


author: Sam Feifer <sfeifer@redhat.com> 5.1.1-4
changelog:
  - Move location of plugin from /usr/share/... to /usr/libexec/... because there is a binary executable


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-1
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-2
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-5
changelog:
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - gvisor-tap-vsock-0.7.5-1.el10
  - update to https://github.com/containers/gvisor-tap-
    vsock/releases/tag/v0.7.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Joe Orton <jorton@redhat.com> - 2.4.59-3.1
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Packit <hello@packit.dev> - 15-1
changelog:
  Changes with 15
  ----------------
    * README: document that cross building works (#168)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * Revert "blueprintload: enable strict checking for toml" (#174)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * blueprintload: enable strict checking for toml (#163)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    * go.mod: update to latest version of `github.com/osbuild/blueprint` (#172)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * import: `progress` from `bootc-image-builder` (#179)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * import: `setup`, `util`, `podmanutil` from `bootc-image-builder` (#178)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * main: Add a --version flag to show the build version (#175)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * main: allow seed setting (#176)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * main: automatically cross build when --arch <foreign> is passed (#164)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show output directory content after image build (#162)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * main: tweak handling of --output-name to avoid adding double extensions (#161)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: tweak how ibcli determines if bootstraping is needed (#167)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * many: move to use the new github.com/osbuild/blueprint module (HMS-5804) (#169)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * progress: set --cache-max-size in osbuild (#182)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 19-1
changelog:
  Changes with 19
  ----------------
    * refactor: use standard logger instead of logrus (#214)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-4
changelog:
  - Related: RHEL-59777 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-59659 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-61636 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-61723 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-63325 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-66599 vault-add fails in FIPS mode
  - Resolves: RHEL-66598 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-66597 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66595 Sentences truncated in man pages
  - Resolves: RHEL-66592 IDP configuration in the IdM WebUI shows Organization is required
  - Resolves: RHEL-65650 ipa-server-install with setup-dns fails 'job for ipa.service failed because the control process exited with error code'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-69300 Support GSSAPI in Cockpit on IPA servers
  - Resolves: RHEL-68447 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-57674 Use RSNv3 and enable cert pruning by default in RHEL 10.0


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-70759 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70477 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-70253 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
  - Resolves: RHEL-69926 add support for python cryptography 44.0.0
  - Resolves: RHEL-69635 All user groups are not being included during HSM token validation


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking
  - Resolves: RHEL-71964 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file
  - Resolves: RHEL-71262 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67190 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-75658 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-74466 kinit with external idp user is failing


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-12
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-13
changelog:
  - Resolves: RHEL-67912 Add DNS over TLS Support, Require bind 32:9.18.33-2 and new bind-dyndb-ldap 11.11-1


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-78766 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-77965 ipa-server-install failing on slow hsm


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-84648 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)
  - Resolves: RHEL-84279 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-84275 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-81200 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-67686 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-67633 ipa-healthcheck has tests which call fips-mode-setup
  - Resolves: RHEL-4845 Protect *all* IPA service principals


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests


author: Julien Rische <jrische@redhat.com> - 4.12.1-1
changelog:
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-2
changelog:
  - Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  - Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-3
changelog:
  - Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
  - Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-47157 ipa-migrate -V options fails to display version
  - Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-4
changelog:
  - Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52305 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
  - Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54545 Covscan issues: Resource Leak
  - Resolves: RHEL-54304 support for python cryptography 43.0.0
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-46897 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Resolves: RHEL-47294 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-56472 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-56917 RFE add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-56965 Backport test fixes in python3-ipatests
  - Resolves: RHEL-58067 ipa replication installation fails in FIPS mode on rhel10
  - Resolves: RHEL-59265 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-59266 Also enable SSSD's ssh service when enabling sss_ssh_knownhosts


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Define portablesuffix according to whether pkgos is defined or not
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Related: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-3
changelog:
  - Fix gating.yaml to reference RHEL 10
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Resolves: RHEL-34597
  - Resolves: RHEL-51617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to local inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-52723


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45357
  - Resolves: RHEL-46026


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45357
  - Resolves: RHEL-52735
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.1.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-62239
  - Resolves: RHEL-62241


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61276


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61276


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61276


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1.1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-95.el10]
changelog:
  - KVM: arm64: Restore TCR2_EL1 register visibility to userspace (Eric Auger) [RHEL-89567]
  - KVM: arm64: Restore S1PIE register visibility to userspace (Eric Auger) [RHEL-89567]
  - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-94944]
  - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-94944]
  - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-94944]
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-94944]
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-94944]
  - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-94944]
  - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-94944]
  - rtla: Define _GNU_SOURCE in timerlat_bpf.c (Tomas Glozar) [RHEL-94187]
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93461] {CVE-2025-21887}
  - Enable NVGRACE_GPU_VFIO_PCI nvgrace-vgpu vfio variant driver in RHEL-10.1 (Donald Dutile) [RHEL-86867]
  - xhci: don't mess with ->d_iname (Desnes Nunes) [RHEL-78931]
  - debugfs: Fix the missing initializations in __debugfs_file_get() (Desnes Nunes) [RHEL-78931]
  - debugfs: take debugfs_short_fops definition out of ifdef (Desnes Nunes) [RHEL-78931]
  - debugfs: allow to store an additional opaque pointer at file creation (Desnes Nunes) [RHEL-78931]
  - debugfs: don't mess with bits in ->d_fsdata (Desnes Nunes) [RHEL-78931]
  - debugfs: get rid of dynamically allocation proxy_ops (Desnes Nunes) [RHEL-78931]
  - debugfs: move ->automount into debugfs_inode_info (Desnes Nunes) [RHEL-78931]
  - debugfs: separate cache for debugfs inodes (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpm: fix state transition for SNK_WAIT_CAPABILITIES state in run_state_machine() (Desnes Nunes) [RHEL-78931]
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Prevent use-after-free in resume from hibernate (Desnes Nunes) [RHEL-78931]
  - usb: typec: ucsi: Fix NULL pointer access (Desnes Nunes) [RHEL-78931] {CVE-2025-21918}
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: fix Telit Cinterion FE990A name (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: add Telit Cinterion FE990B compositions (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: match on interface class for Telit FN990B (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Desnes Nunes) [RHEL-78931]
  - usb: hub: lack of clearing xHC resources (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes (Desnes Nunes) [RHEL-78931]
  - xhci: Restrict USB4 tunnel detection for USB3 devices to Intel hosts (Desnes Nunes) [RHEL-78931]
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Desnes Nunes) [RHEL-78931]
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Desnes Nunes) [RHEL-78931]
  - usb: typec: ucsi: increase timeout for PPM reset operations (Desnes Nunes) [RHEL-78931]
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Desnes Nunes) [RHEL-78931] {CVE-2025-21916}
  - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Desnes Nunes) [RHEL-78931]
  - usb: roles: set switch registered flag early on (Desnes Nunes) [RHEL-78931]
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Desnes Nunes) [RHEL-78931]
  - usb: gadget: core: flush gadget workqueue after device removal (Desnes Nunes) [RHEL-78931] {CVE-2025-21838}
  - usb: core: fix pipe creation for get_bMaxPacketSize0 (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Desnes Nunes) [RHEL-78931]
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Desnes Nunes) [RHEL-78931]
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Desnes Nunes) [RHEL-78931]
  - usb: cdc-acm: Fix handling of oversized fragments (Desnes Nunes) [RHEL-78931]
  - usb: cdc-acm: Check control transfer buffer size before access (Desnes Nunes) [RHEL-78931] {CVE-2025-21704}
  - usb: xhci: Restore xhci_pci support for Renesas HCs (Desnes Nunes) [RHEL-78931]
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: drop MeiG Smart defines (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: fix Telit Cinterion FN990A name (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: add Telit Cinterion FN990B compositions (Desnes Nunes) [RHEL-78931]
  - USB: serial: option: add MeiG Smart SLM828 (Desnes Nunes) [RHEL-78931]
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Desnes Nunes) [RHEL-78931]
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Desnes Nunes) [RHEL-78931] {CVE-2025-21776}
  - usb: dwc3: Document nostream_work (Desnes Nunes) [RHEL-78931]
  - usb: phy: generic: Use proper helper for property detection (Desnes Nunes) [RHEL-78931]
  - usb: hcd: Bump local buffer size in rh_string() (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS (Desnes Nunes) [RHEL-78931]
  - usb: xhci: tegra: Fix OF boolean read warning (Desnes Nunes) [RHEL-78931]
  - usb: host: xhci-plat: add support compatible ID PNP0D15 (Desnes Nunes) [RHEL-78931]
  - usb: typec: ucsi: Add a macro definition for UCSI v1.0 (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: core: Defer the probe until USB power supply ready (Desnes Nunes) [RHEL-78931]
  - usbip: Correct format specifier for seqnum from %d to %u (Desnes Nunes) [RHEL-78931]
  - usbip: Fix seqnum sign extension issue in vhci_tx_urb (Desnes Nunes) [RHEL-78931]
  - dt-bindings: usb: snps,dwc3: Split core description (Desnes Nunes) [RHEL-78931]
  - dt-bindings: usb: qcom,dwc3: Add IPQ5424 to USB DWC3 bindings (Desnes Nunes) [RHEL-78931]
  - usb: quirks: Add NO_LPM quirk for TOSHIBA TransMemory-Mx device (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (Desnes Nunes) [RHEL-78931]
  - USB: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78931]
  - USB: typec: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78931]
  - USB: host: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78931]
  - USB: Replace own str_plural with common one (Desnes Nunes) [RHEL-78931]
  - memstick: core: fix kernel-doc notation (Desnes Nunes) [RHEL-78931]
  - usb: phy: Remove API devm_usb_put_phy() (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Desnes Nunes) [RHEL-78931]
  - usb: host: xhci-plat: Assign shared_hcd->rsrc_start (Desnes Nunes) [RHEL-78931]
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: Skip resume if pm_runtime_set_active() fails (Desnes Nunes) [RHEL-78931]
  - dt-bindings: usb: Correct indentation and style in DTS example (Desnes Nunes) [RHEL-78931]
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Desnes Nunes) [RHEL-78931]
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (Desnes Nunes) [RHEL-78931]
  - USB: serial: ch341: use fix-width types consistently (Desnes Nunes) [RHEL-78931]
  - USB: serial: ch341: add hardware flow control RTS/CTS (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Expose router DROM through debugfs (Desnes Nunes) [RHEL-78931]
  - usb: typec: class: Remove both cable_match() and partner_match() (Desnes Nunes) [RHEL-78931]
  - usb: typec: ucsi: Implement ChromeOS UCSI driver (Desnes Nunes) [RHEL-78931]
  - usb: cdns3: remove redundant if branch (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Handle DisplayPort tunnel activation asynchronously (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Rework tb_tunnel_consumed_bandwidth() (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Move forward declarations in one place (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Pass reason to tb_dp_resource_unavailable() (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Drop tb_tunnel_restart() (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Rework how tunnel->[init|deinit] hooks are called (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Show path name in debug log when path is deactivated (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Make tb_tunnel_one_dp() return void (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Increase DPRX capabilities read timeout (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Debug log an invalid config space reply just once (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Log config space when invalid config space reply is received (Desnes Nunes) [RHEL-78931]
  - thunderbolt: Drop doubled empty line from ctl.h (Desnes Nunes) [RHEL-78931]
  - thunderbolt: debugfs: Add write capability to path config space (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Add Kurokesu C1 PRO camera (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets (Desnes Nunes) [RHEL-78931]
  - USB: usbip: Update USB/IP OP_REP_IMPORT documentation. (Desnes Nunes) [RHEL-78931]
  - xhci: Add missing capability definition bits (Desnes Nunes) [RHEL-78931]
  - xhci: Add command completion parameter support (Desnes Nunes) [RHEL-78931]
  - xhci: dbgtty: Improve performance by handling received data immediately. (Desnes Nunes) [RHEL-78931]
  - xhci: dbc: Improve performance by removing delay in transfer event polling. (Desnes Nunes) [RHEL-78931]
  - phy: qcom-qusb2: Add support for QCS615 (Desnes Nunes) [RHEL-78931]
  - dt-bindings: usb: qcom,dwc3: Add QCS615 to USB DWC3 bindings (Desnes Nunes) [RHEL-78931]
  - phy: core: Simplify API of_phy_simple_xlate() implementation (Desnes Nunes) [RHEL-78931]
  - usb: typec: Print err when displayport fails to enter (Desnes Nunes) [RHEL-78931]
  - usb: typec: Make active on port altmode writable (Desnes Nunes) [RHEL-78931]
  - usb: typec: thunderbolt: Remove IS_ERR check for plug (Desnes Nunes) [RHEL-78931]
  - usb: typec: thunderbolt: Fix loops that iterate TYPEC_PLUG_SOP_P and TYPEC_PLUG_SOP_PP (Desnes Nunes) [RHEL-78931]
  - usb: typec: Add driver for Thunderbolt 3 Alternate Mode (Desnes Nunes) [RHEL-78931]
  - redhat/configs: Enable CONFIG_TYPEC_TBT_ALTMODE in RHEL (Desnes Nunes) [RHEL-78931]
  - usb: typec: Only use SVID for matching altmodes (Desnes Nunes) [RHEL-78931]
  - modpost: call module_alias_printf() from all do_*_entry() functions (Desnes Nunes) [RHEL-78931]
  - modpost: pass (struct module *) to do_*_entry() functions (Desnes Nunes) [RHEL-78931]
  - modpost: introduce module_alias_printf() helper (Desnes Nunes) [RHEL-78931]
  - modpost: remove unnecessary check in do_acpi_entry() (Desnes Nunes) [RHEL-78931]
  - modpost: remove incorrect code in do_eisa_entry() (Desnes Nunes) [RHEL-78931]
  - usb: core: sysfs: Constify 'struct bin_attribute' (Desnes Nunes) [RHEL-78931]
  - usbip: Accept arbitrarily long scatter-gather list (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpm: Add new AMS for Get_Revision response (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpm: Add support for parsing pd-revision DT property (Desnes Nunes) [RHEL-78931]
  - dt-bindings: connector: Add pd-revision property (Desnes Nunes) [RHEL-78931]
  - usb: typec: tcpci: set local CC to Rd only when cc1/cc2 status is Rp (Desnes Nunes) [RHEL-78931]
  - USB: usblp: remove redundant semicolon (Desnes Nunes) [RHEL-78931]
  - USB: Optimize goto logic in API usb_register_driver() (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: dwc3-am62: Re-initialize controller if lost power in PM suspend (Desnes Nunes) [RHEL-78931]
  - usb: common: expand documentation for USB functions (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-78931] {CVE-2024-58002}
  - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-78931]
  - MAINTAINERS: Add missing file entries for the USB video class driver (Desnes Nunes) [RHEL-78931]
  - docs: media: update location of the media patches (Desnes Nunes) [RHEL-78931]
  - MAINTAINERS: update location of media main tree (Desnes Nunes) [RHEL-78931]
  - MAINTAINERS: mailmap: update Alexey Klimov's email address (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Refactor frame parsing code into a uvc_parse_frame function (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Remove duplicated cap/out code (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Use uvc_query_name in uvc_get_video_ctrl (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Add more logging to uvc_query_ctrl() (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Support partial control reads (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Desnes Nunes) [RHEL-78931]
  - media: uvcvideo: Fix double free in error path (Desnes Nunes) [RHEL-78931] {CVE-2024-57980}
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Desnes Nunes) [RHEL-78931] {CVE-2024-58079}
  - media: uvcvideo: Reorder uvc_status_init() (Desnes Nunes) [RHEL-78931]
  - mmc: core: Drop the MMC_RSP_R1_NO_CRC response (Desnes Nunes) [RHEL-78931]
  - phy: qualcomm: qmp-pcie: add support for SAR2130P (Desnes Nunes) [RHEL-78931]
  - phy: qualcomm: qmp-pcie: define several new registers (Desnes Nunes) [RHEL-78931]
  - phy: qualcomm: qmp-pcie: split PCS_LANE1 region (Desnes Nunes) [RHEL-78931]
  - phy: qualcomm: qmp-combo: add support for SAR2130P (Desnes Nunes) [RHEL-78931]
  - phy: qcom: qmp: Add phy register and clk setting for QCS615 PCIe (Desnes Nunes) [RHEL-78931]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Add SAR2130P compatible (Desnes Nunes) [RHEL-78931]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the QCS615 QMP PCIe PHY Gen3 x1 (Desnes Nunes) [RHEL-78931]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Add SAR2130P compatible (Desnes Nunes) [RHEL-78931]
  - extcon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-78931]
  - extcon: realtek: fix NULL deref check in extcon_rtk_type_c_probe (Desnes Nunes) [RHEL-78931]
  - Documentation: extcon: add documentation for Extcon subsystem (Desnes Nunes) [RHEL-78931]
  - usb: storage: add a macro for the upper limit of max LUN (Desnes Nunes) [RHEL-78931]
  - USB: Fix the issue of task recovery failure caused by USB status when S4 wakes up (Desnes Nunes) [RHEL-78931]
  - usb: chipidea: host: Improve port index sanitizing (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: core: Disable USB2 retry for DWC_usb31 1.80a and prior (Desnes Nunes) [RHEL-78931]
  - dt-bindings: usb: qcom,dwc3: Make ss_phy_irq optional for X1E80100 (Desnes Nunes) [RHEL-78931]
  - usb: collapse USB_STORAGE Kconfig comment (Desnes Nunes) [RHEL-78931]
  - usb: gadget: functionfs: fix spellos (Desnes Nunes) [RHEL-78931]
  - usb: dwc3: remove unused sg struct member (Desnes Nunes) [RHEL-78931]
  - phy: qcom: qmp: Enable IPQ5424 support (Desnes Nunes) [RHEL-78931]
  - dt-bindings: phy: qcom,qmp-usb: Add IPQ5424 USB3 PHY (Desnes Nunes) [RHEL-78931]
  - phy: qcom-qusb2: add QUSB2 support for IPQ5424 (Desnes Nunes) [RHEL-78931]
  - dt-bindings: phy: qcom,qusb2: Document IPQ5424 compatible (Desnes Nunes) [RHEL-78931]
  - phy: tegra194: p2u: Allow to enable driver on Tegra234 (Desnes Nunes) [RHEL-78931]
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89498]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89498]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89498]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89498]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89498]
  - printk: Defer legacy printing when holding printk_cpu_sync (Derek Barbosa) [RHEL-89498]
  - redhat: add namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-88630]
  - iommu/amd: Enable support for up to 2K interrupts per function (Eder Zulian) [RHEL-24190]
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Eder Zulian) [RHEL-24190]
  - iommu/amd: Replace slab cache allocator with page allocator (Eder Zulian) [RHEL-24190]
  - iommu/amd: Introduce generic function to set multibit feature value (Eder Zulian) [RHEL-24190]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-96.el10]
changelog:
  - x86/CPU/AMD: Print the reason for the last reset (Steve Best) [RHEL-89439]
  - Documentation: Add AMD Zen debugging document (Steve Best) [RHEL-89439]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (Steve Best) [RHEL-89439]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (Steve Best) [RHEL-89439]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (Steve Best) [RHEL-89439]
  - unmaintain ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-81214]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90739]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94262] {CVE-2025-37738}
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93643] {CVE-2025-23150}
  - lockd: add netlink control interface (Scott Mayhew) [RHEL-71698]
  - macintosh: declare ctl_table as const (José Expósito) [RHEL-88416]
  - tty: Make sysctl table const (José Expósito) [RHEL-88416]
  - sysctl: allow registration of const struct ctl_table (José Expósito) [RHEL-88416]
  - sysctl: move internal interfaces to const struct ctl_table (José Expósito) [RHEL-88416]
  - bpf: Constify ctl_table argument of filter function (José Expósito) [RHEL-88416]
  - hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (José Expósito) [RHEL-88416]
  - hrtimers: Add missing hrtimer_init() trace points (José Expósito) [RHEL-88416]
  - mm/migrate: Add migrate_device_pfns (José Expósito) [RHEL-88416]
  - mm: allow compound zone device pages (José Expósito) [RHEL-88416]
  - mm/mm_init: move p2pdma page refcount initialisation to p2pdma (José Expósito) [RHEL-88416]
  - drm: Move for_each_if() to util_macros.h for wider use (José Expósito) [RHEL-88416]
  - ksm: add ksm involvement information for each process (CKI Backport Bot) [RHEL-84770]
  - MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry (Mark Salter) [RHEL-80338]
  - selftests/mm: rename pkey register macro (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: fix decoding of lines with an additional info (Mark Salter) [RHEL-80338]
  - scripts/decode_stacktrace.sh: remove trailing space (Mark Salter) [RHEL-80338]
  - redhat/configs: Enable ARM_CCA_GUEST (Mark Salter) [RHEL-80338]
  - arm64: Fix 5-level paging support in kexec/hibernate trampoline (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of TRFCR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64: Remove duplicate included header (Mark Salter) [RHEL-80338]
  - arm64/Kconfig: Drop EXECMEM dependency from ARCH_WANTS_EXECMEM_LATE (Mark Salter) [RHEL-80338]
  - arm64: asm: Fix typo in pgtable.h (Mark Salter) [RHEL-80338]
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop INIT_MM_CONTEXT() (Mark Salter) [RHEL-80338]
  - Documentation: Update the behaviour of "kvm-arm.mode" (Mark Salter) [RHEL-80338]
  - arm64: rsi: Add automatic arm-cca-guest module loading (Mark Salter) [RHEL-80338]
  - arm64: Document Arm Confidential Compute (Mark Salter) [RHEL-80338]
  - virt: arm-cca-guest: TSM_REPORT support for realms (Mark Salter) [RHEL-80338]
  - arm64: Add missing registrations of hwcaps (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Remove stray references to SF8MMx (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Add 2024 dpISA extensions to hwcap test (Mark Salter) [RHEL-80338]
  - KVM: arm64: Allow control of dpISA extensions in ID_AA64ISAR3_EL1 (Mark Salter) [RHEL-80338]
  - arm64/hwcap: Describe 2024 dpISA extensions to userspace (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 to DDI0601 2024-12 (Mark Salter) [RHEL-80338]
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (Mark Salter) [RHEL-80338]
  - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ZFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64FPFR0_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64ISAR3_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Update ID_AA64PFR2_EL1 to DDI0601 2024-09 (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of CPACR_ELx SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Convert *_EL12 accessors to Mapping (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Get rid of the TCR2_EL1x SysregFields (Mark Salter) [RHEL-80338]
  - arm64/sysreg: Allow a 'Mapping' descriptor for system registers (Mark Salter) [RHEL-80338]
  - arm64/cpufeature: Refactor conditional logic in init_cpu_ftr_reg() (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add HAFT to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: mm: Test for pmd_sect() in vmemmap_check_pmd() (Mark Salter) [RHEL-80338]
  - arm64/mm: Replace open encodings with PXD_TABLE_BIT (Mark Salter) [RHEL-80338]
  - arm64/mm: Rename pte_mkpresent() as pte_mkvalid() (Mark Salter) [RHEL-80338]
  - arm64: Kconfig: force ARM64_PAN=y when enabling TTBR0 sw PAN (Mark Salter) [RHEL-80338]
  - arm64/mm: Fix Boot panic on Ampere Altra (Mark Salter) [RHEL-80338]
  - arm64/mm: Override PARange for !LPA2 and use it consistently (Mark Salter) [RHEL-80338]
  - arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled (Mark Salter) [RHEL-80338]
  - bpf, arm64: Emit A64_{ADD,SUB}_I when possible in emit_{lse,ll_sc}_atomic() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Factor out emit_a64_add_i() (Mark Salter) [RHEL-80338]
  - bpf, arm64: Simplify if logic in emit_lse_atomic() (Mark Salter) [RHEL-80338]
  - redhat configs: enable CONFIG_HISILICON_ERRATUM_162100801 (Mark Salter) [RHEL-80338]
  - arm64: realm: Use aliased addresses for device DMA to shared buffers (Mark Salter) [RHEL-80338]
  - dma: Introduce generic dma_addr_*crypted helpers (Mark Salter) [RHEL-80338]
  - dma: Fix encryption bit clearing for dma_to_phys (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Don't WARN when unwinding other tasks (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: Skip reporting LR at exception boundaries (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings (Mark Salter) [RHEL-80338]
  - kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c (Mark Salter) [RHEL-80338]
  - arm64/signal: Silence sparse warning storing GCSPR_EL0 (Mark Salter) [RHEL-80338]
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 (Mark Salter) [RHEL-80338]
  - clocksource/drivers/arm_arch_timer: Use of_property_present() for non-boolean properties (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Ensure stable names for GCS stress test results (Mark Salter) [RHEL-80338]
  - kselftest/arm64: Validate that GCS push and write permissions work (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: Add GCS to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - arm64: disable ARCH_CORRECT_STACKTRACE_ON_KRETPROBE tests (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove remaining 64x64 PMULL fallback code (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Use faster 16x64 bit polynomial multiply (Mark Salter) [RHEL-80338]
  - crypto: arm64/crct10dif - Remove obsolete chunking logic (Mark Salter) [RHEL-80338]
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Mark Salter) [RHEL-80338]
  - arm64/ptrace: Clarify documentation of VL configuration via ptrace (Mark Salter) [RHEL-80338]
  - arm64/mm: Change protval as 'pteval_t' in map_range() (Mark Salter) [RHEL-80338]
  - arm64: uprobes: Optimize cache flushes for xol slot (Mark Salter) [RHEL-80338]
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Mark Salter) [RHEL-80338]
  - arm64/mm: Sanity check PTE address before runtime P4D/PUD folding (Mark Salter) [RHEL-80338]
  - arm64/fpsimd: Fix a typo (Mark Salter) [RHEL-80338]
  - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers (Mark Salter) [RHEL-80338]
  - arm64: Return early when break handler is found on linked-list (Mark Salter) [RHEL-80338]
  - arm64/mm: Drop _PROT_SECT_DEFAULT (Mark Salter) [RHEL-80338]
  - arm64: Add command-line override for ID_AA64MMFR0_EL1.ECV (Mark Salter) [RHEL-80338]
  - arm64: head: Drop SWAPPER_TABLE_SHIFT (Mark Salter) [RHEL-80338]
  - arm64: cpufeature: add POE to cpucap_is_possible() (Mark Salter) [RHEL-80338]
  - selftests/mm: Enable pkey_sighandler_tests on arm64 (Mark Salter) [RHEL-80338]
  - selftests/mm: Use generic pkey register manipulation (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unused macro (Mark Salter) [RHEL-80338]
  - arm64: signal: Remove unnecessary check when saving POE state (Mark Salter) [RHEL-80338]
  - arm64/scs: Drop unused prototype __pi_scs_patch_vmlinux() (Mark Salter) [RHEL-80338]
  - arm64/scs: Deal with 64-bit relative offsets in FDE frames (Mark Salter) [RHEL-80338]
  - arm64/scs: Fix handling of DWARF augmentation data in CIE/FDE frames (Mark Salter) [RHEL-80338]
  - arm64: preserve pt_regs::stackframe during exec*() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: unwind exception boundaries (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: split unwind_consume_stack() (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report recovered PCs (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: report source of unwind data (Mark Salter) [RHEL-80338]
  - arm64: stacktrace: move dump_backtrace() to kunwind_stack_walk() (Mark Salter) [RHEL-80338]
  - arm64: use a common struct frame_record (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: swap 'unused' and 'pmr' fields (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: rename "pmr_save" -> "pmr" (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: remove stale big-endian layout (Mark Salter) [RHEL-80338]
  - arm64: pt_regs: assert pt_regs is a multiple of 16 bytes (Mark Salter) [RHEL-80338]
  - arm64: Support AT_HWCAP3 (Mark Salter) [RHEL-80338]
  - binfmt_elf: Wire up AT_HWCAP3 at AT_HWCAP4 (Mark Salter) [RHEL-80338]
  - arm64/crc32: Implement 4-way interleave using PMULL (Mark Salter) [RHEL-80338]
  - arm64/crc32: Reorganize bit/byte ordering macros (Mark Salter) [RHEL-80338]
  - arm64/lib: Handle CRC-32 alternative in C code (Mark Salter) [RHEL-80338]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Mark Salter) [RHEL-80338]
  - arm64: mops: Document requirements for hypervisors (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for copy_page() and clear_page() (Mark Salter) [RHEL-80338]
  - arm64: lib: Use MOPS for memcpy() routines (Mark Salter) [RHEL-80338]
  - arm64: mops: Document booting requirement for HCR_EL2.MCE2 (Mark Salter) [RHEL-80338]
  - arm64: mops: Handle MOPS exceptions from EL1 (Mark Salter) [RHEL-80338]
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions (Mark Salter) [RHEL-80338]
  - arm64: optimize flush tlb kernel range (Mark Salter) [RHEL-80338]
  - arm64: tlbflush: add __flush_tlb_range_limit_excess() (Mark Salter) [RHEL-80338]
  - arm64: insn: Simulate nop instruction for better uprobe performance (Mark Salter) [RHEL-80338]
  - arm64: probes: Remove probe_opcode_t (Mark Salter) [RHEL-80338]
  - arm64: probes: Cleanup kprobes endianness conversions (Mark Salter) [RHEL-80338]
  - arm64: probes: Move kprobes-specific fields (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove PREEMPT_DISABLE_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove DMA_{TO,FROM}_DEVICE (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VM_EXEC and PAGE_SZ (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove MM_CONTEXT_ID (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove COMPAT_{RT_,SIGFRAME_REGS_OFFSET (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove VMA_VM_* (Mark Salter) [RHEL-80338]
  - arm64: asm-offsets: remove TSK_ACTIVE_MM (Mark Salter) [RHEL-80338]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-97.el10]
changelog:
  - memcg: always call cond_resched() after fn() (Radostin Stoyanov) [RHEL-81199]
  - memcg: fix soft lockup in the OOM process (Radostin Stoyanov) [RHEL-81199] {CVE-2024-57977}
  - r8169: switch away from deprecated pcim_iomap_table (Izabela Bakollari) [RHEL-89042]
  - r8169: increase max jumbo packet size on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for Intel Killer E5000 (Izabela Bakollari) [RHEL-89042]
  - r8169: don't scan PHY addresses > 0 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove redundant hwmon support (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D rev.b (Izabela Bakollari) [RHEL-89042]
  - r8169: adjust version numbering for RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: remove unused flag RTL_FLAG_TASK_RESET_NO_QUEUE_WAKE (Izabela Bakollari) [RHEL-89042]
  - r8169: use helper r8169_mod_reg8_cond to simplify rtl_jumbo_config (Izabela Bakollari) [RHEL-89042]
  - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers (Izabela Bakollari) [RHEL-89042]
  - r8169: improve rtl_set_d3_pll_down (Izabela Bakollari) [RHEL-89042]
  - r8169: improve __rtl8169_set_wol (Izabela Bakollari) [RHEL-89042]
  - r8169: remove leftover locks after reverted change (Izabela Bakollari) [RHEL-89042]
  - r8169: improve initialization of RSS registers on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-89042]
  - r8169: fix inconsistent indenting in rtl8169_get_eth_mac_stats (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for RTL8125D (Izabela Bakollari) [RHEL-89042]
  - r8169: enable EEE at 2.5G per default on RTL8125B (Izabela Bakollari) [RHEL-89042]
  - r8169: remove rtl_dash_loop_wait_high/low (Izabela Bakollari) [RHEL-89042]
  - r8169: avoid duplicated messages if loading firmware fails and switch to warn level (Izabela Bakollari) [RHEL-89042]
  - r8169: replace custom flag with disable_work() et al (Izabela Bakollari) [RHEL-89042]
  - r8169: don't take RTNL lock in rtl_task() (Izabela Bakollari) [RHEL-89042]
  - r8169: implement additional ethtool stats ops (Izabela Bakollari) [RHEL-89042]
  - r8169: enable SG/TSO on selected chip versions per default (Izabela Bakollari) [RHEL-89042]
  - r8169: remove original workaround for RTL8125 broken rx issue (Izabela Bakollari) [RHEL-89042]
  - r8169: don't apply UDP padding quirk on RTL8126A (Izabela Bakollari) [RHEL-89042]
  - r8169: add support for the temperature sensor being available from RTL8125B (Izabela Bakollari) [RHEL-89042]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83635]
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs (Tony Camuso) [RHEL-93188]
  - HID: intel-thc: fix CONFIG_HID dependency (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Send clock sync message immediately after reset (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_get_tx_* (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_cl_tx_empty (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Remove unused ishtp_dev_state_str (Tony Camuso) [RHEL-93188]
  - HID: intel-ish-hid: Add firmware version sysfs attributes (Tony Camuso) [RHEL-93188]
  - HID: Fix typo in the comment (Tony Camuso) [RHEL-93188]
  - HID: ishtp-hid-client: replace fake-flex arrays with flex-array members (Tony Camuso) [RHEL-93188]
  - selftests: netfilter: fix conntrack stress test failures on debug kernels (Florian Westphal) [RHEL-76546]
  - selftests: netfilter: add conntrack stress test (Florian Westphal) [RHEL-76546]
  - netfilter: nf_conntrack: speed up reads from nf_conntrack proc file (Florian Westphal) [RHEL-76546]
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia) [RHEL-87405]
  - loop: add file_start_write() and file_end_write() (Ming Lei) [RHEL-96222]
  - loop: don't require ->write_iter for writable files in loop_configure (Ming Lei) [RHEL-96222]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-79908]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-79908]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-79908]
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88003]
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Mamatha Inamdar) [RHEL-95931]
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Mamatha Inamdar) [RHEL-95931]
  - mptcp: Remove unused declaration mptcp_set_owner_r() (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: validate MPJoin HMacFailure counters (Davide Caratti) [RHEL-84538]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: close fd_in before returning in main_loop (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Davide Caratti) [RHEL-84538]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84538] {CVE-2025-23145}
  - mptcp: sockopt: fix getting freebind & transparent (Davide Caratti) [RHEL-84538]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Davide Caratti) [RHEL-84538]
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: more info without CAP_NET_ADMIN (Davide Caratti) [RHEL-84538]
  - tcp: ulp: diag: always print the name if any (Davide Caratti) [RHEL-84538]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84538] {CVE-2025-21938}
  - mptcp: reset when MPTCP opts are dropped after join (Davide Caratti) [RHEL-84538]
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84538] {CVE-2025-21875}
  - mptcp: micro-optimize __mptcp_move_skb() (Davide Caratti) [RHEL-84538]
  - mptcp: dismiss __mptcp_rmem() (Davide Caratti) [RHEL-84538]
  - net: dismiss sk_forward_alloc_get() (Davide Caratti) [RHEL-84538]
  - mptcp: cleanup mem accounting (Davide Caratti) [RHEL-84538]
  - mptcp: move the whole rx path under msk socket lock protection (Davide Caratti) [RHEL-84538]
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() (Davide Caratti) [RHEL-84538]
  - mptcp: consolidate subflow cleanup (Davide Caratti) [RHEL-84538]
  - mptcp: pm: userspace: flags: clearer msg if no remote addr (Davide Caratti) [RHEL-84538]
  - selftests: mptcp: connect: -f: no reconnect (Davide Caratti) [RHEL-84538]
  - mptcp: blackhole only if 1st SYN retrans w/o MPC is accepted (Davide Caratti) [RHEL-84538]
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84538] {CVE-2025-21705}
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84538] {CVE-2025-21706}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84538] {CVE-2025-21707}
  - selftests: mptcp: avoid spurious errors on disconnect (Davide Caratti) [RHEL-84538]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84538]
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84538]
  - mptcp: sysctl: avail sched: remove write access (Davide Caratti) [RHEL-84538]
  - mptcp: prevent excessive coalescing on receive (Davide Caratti) [RHEL-84538]
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Davide Caratti) [RHEL-84538]
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg (Davide Caratti) [RHEL-84538]
  - mptcp: remove unneeded lock when listing scheds (Davide Caratti) [RHEL-84538]
  - mptcp: implement mptcp_pm_connection_closed (Davide Caratti) [RHEL-84538]
  - dim: pass dim_sample to net_dim() by reference (CKI Backport Bot) [RHEL-89803]
  - dim: make dim_calc_stats() inputs const pointers (CKI Backport Bot) [RHEL-89803]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-86507]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-98.el10]
changelog:
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38569]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38569]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38569]
  - redhat/kernel.spec: drop modules-extra-matched for noarch (Jan Stancek) [RHEL-95740]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-86520]
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87577]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87577]
  - ovl: don't require "metacopy=on" for "verity" (Miklos Szeredi) [RHEL-82858]
  - ovl: relax redirect/metacopy requirements for lower -> data redirect (Miklos Szeredi) [RHEL-82858]
  - ovl: make redirect/metacopy rejection consistent (Miklos Szeredi) [RHEL-82858]
  - ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-82858]
  - ovl: don't allow datadir only (Miklos Szeredi) [RHEL-82858]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94466] {CVE-2025-37750}
  - Merge DRM changes from upstream v6.13..v6.14 (José Expósito) [RHEL-75957]
  - Merge DRM changes from upstream v6.12..v6.13 (José Expósito) [RHEL-75957]
  - selftests/bpf: lwt_seg6local: Move test to test_progs (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: lwt_seg6local: Remove unused routes (Hangbin Liu) [RHEL-82844]
  - selftests/bpf: add missing header include for htons (Hangbin Liu) [RHEL-82844]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-99.el10]
changelog:
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97171]
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89166]
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Olga Kornievskaia) [RHEL-82689]
  - nfsd: fix access checking for NLM under XPRTSEC policies (Olga Kornievskaia) [RHEL-82689]
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-92678]
  - selftests: Add IPv6 link-local address generation tests for GRE devices. (Guillaume Nault) [RHEL-94024]
  - tpm: remove kmalloc failure error message (Štěpán Horáček) [RHEL-72764]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72764]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72764]
  - tpm: Make chip->{status,cancel,req_canceled} opt (Štěpán Horáček) [RHEL-72764]
  - tpm: End any active auth session before shutdown (Štěpán Horáček) [RHEL-72764]
  - tpm_crb: Clean-up and refactor check for idle support (Štěpán Horáček) [RHEL-72764]
  - tpm/tpm_ftpm_tee: fix struct ftpm_tee_private documentation (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-72764]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72764]
  - tpm: Convert warn to dbg in tpm2_start_auth_session() (Štěpán Horáček) [RHEL-72764]
  - tpm: Lazily flush auth session when getting random data (Štěpán Horáček) [RHEL-72764]
  - tpm: ftpm_tee: remove incorrect of_match_ptr annotation (Štěpán Horáček) [RHEL-72764]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Add new device/vendor ID 0x50666666 (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Move i2c locking to request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - char: tpm: cr50: Use generic request/relinquish locality ops (Štěpán Horáček) [RHEL-72764]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72764]
  - libstub,tpm: do not ignore failure case when reading final event log (Štěpán Horáček) [RHEL-72764]
  - tpm: fix unsigned/signed mismatch errors related to __calc_tpm2_event_size (Štěpán Horáček) [RHEL-72764]
  - tpm: do not ignore memblock_reserve return value (Štěpán Horáček) [RHEL-72764]
  - tpm: fix signed/unsigned bug when checking event logs (Štěpán Horáček) [RHEL-72764]
  - openvswitch: Stricter validation for the userspace action (Eelco Chaudron) [RHEL-84563]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [RHEL-84563]
  - net: openvswitch: fix nested key length validation in the set() action (Eelco Chaudron) [RHEL-84563] {CVE-2025-37789}
  - net: openvswitch: remove misbehaving actions length check (Eelco Chaudron) [RHEL-84563]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eelco Chaudron) [RHEL-81497 RHEL-84563] {CVE-2025-21761}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Eelco Chaudron) [RHEL-84563] {CVE-2025-21681}
  - openvswitch: Pass on secpath details for internal port rx. (Eelco Chaudron) [RHEL-84563]
  - selftests: mptcp: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: netfilter: remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for SRv6 tests and remove rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: use setup_ns for bareudp testing (Hangbin Liu) [RHEL-80284]
  - selftests: net: remove redundant rp_filter configuration (Hangbin Liu) [RHEL-80284]
  - selftests: net: disable rp_filter after namespace initialization (Hangbin Liu) [RHEL-80284]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81403] {CVE-2025-21764}
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89935]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89489]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89489]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87628] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87628]
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69285]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-100.el10]
changelog:
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92308]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92308]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92308]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92308]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92308]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92308]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92308]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92308]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92308]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92308]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92308]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92308]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92308]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92308]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92674]
  - tcp: add LINUX_MIB_PAWS_TW_REJECTED counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_TW_PAWS drop reason (Antoine Tenart) [RHEL-88891]
  - udp: expand SKB_DROP_REASON_UDP_CSUM use (Antoine Tenart) [RHEL-88891]
  - tcp: add four drop reasons to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - tcp: add a drop_reason pointer to tcp_check_req() (Antoine Tenart) [RHEL-88891]
  - af_unix: Use consume_skb() in connect() and sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Reuse out_pipe label in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_sendmsg(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Clean up error paths in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set error only when needed in unix_stream_connect(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_dgram_disconnected(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_stream_read_skb(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in manage_oob(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in __unix_gc(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_sock_destructor(). (Antoine Tenart) [RHEL-88891]
  - af_unix: Set drop reason in unix_release_sock(). (Antoine Tenart) [RHEL-88891]
  - net: dropreason: Gather SOCKET_ drop reasons. (Antoine Tenart) [RHEL-88891]
  - tcp: add LINUX_MIB_PAWS_OLD_ACK SNMP counter (Antoine Tenart) [RHEL-88891]
  - tcp: add TCP_RFC7323_PAWS_ACK drop reason (Antoine Tenart) [RHEL-88891]
  - tcp: add drop_reason support to tcp_disordered_ack() (Antoine Tenart) [RHEL-88891]
  - net: bridge: add skb drop reasons to the most common drop points (Antoine Tenart) [RHEL-88891]
  - net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE (Antoine Tenart) [RHEL-88891]
  - net/sched: Add drop reasons for AQM-based qdiscs (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_cake: Add drop reasons (Antoine Tenart) [RHEL-88891]
  - net_sched: sch_fq: add three drop_reason (Antoine Tenart) [RHEL-88891]
  - netfilter: br_netfilter: remove unused conditional and dead code (Antoine Tenart) [RHEL-88891]
  - ipv4: route: fix drop reason being overridden in ip_route_input_slow (Antoine Tenart) [RHEL-88891]
  - ip: Return drop reason if in_dev is NULL in ip_route_input_rcu(). (Antoine Tenart) [RHEL-88891]
  - net: ip: fix unexpected return in fib_validate_source() (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_use_hint() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mkroute_input/__mkroute_input return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_noref() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_rcu() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_slow() return drop reasons (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_mc_validate_source() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make ip_route_input_mc() return drop reason (Antoine Tenart) [RHEL-88891]
  - net: ip: make fib_validate_source() support drop reasons (Antoine Tenart) [RHEL-88891]
  - objtool, x86/hweight: Remove ANNOTATE_IGNORE_ALTERNATIVE (Joe Lawrence) [RHEL-94124]
  - jump_label: adjust inline asm to be consistent (Joe Lawrence) [RHEL-94124]
  - objtool: Speed up SHT_GROUP reindexing (Joe Lawrence) [RHEL-94124]
  - objtool: Fix up st_info in COMDAT group section (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 (Joe Lawrence) [RHEL-94124]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 (Joe Lawrence) [RHEL-94124]
  - objtool: Remove ANNOTATE_IGNORE_ALTERNATIVE from CLAC/STAC (Joe Lawrence) [RHEL-94124]
  - objtool, xen: Fix INSN_SYSCALL / INSN_SYSRET semantics (Joe Lawrence) [RHEL-94124]
  - objtool: Stop UNRET validation on UD2 (Joe Lawrence) [RHEL-94124]
  - objtool: Split INSN_CONTEXT_SWITCH into INSN_SYSCALL and INSN_SYSRET (Joe Lawrence) [RHEL-94124]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Joe Lawrence) [RHEL-94124]
  - objtool: Fix X86_FEATURE_SMAP alternative handling (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use asm_inline() instead of asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use ASM_CALL_CONSTRAINT in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86/hweight: Use named operands in inline asm() (Joe Lawrence) [RHEL-94124]
  - x86: use proper 'clac' and 'stac' opcode names (Joe Lawrence) [RHEL-94124]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Update dump_ghcb() to use the GHCB snapshot fields (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check and free obsolete roots in kvm_mmu_reload() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally for KVM_PROFILING (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do not use kvm_rip_read() unconditionally in KVM tracepoints (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: WARN if an invalid posted interrupt IRTE entry is added (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: WARN if KVM attempts to set vCPU affinity without posted intrrupts (Maxim Levitsky) [RHEL-82917]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Allocate IR data using atomic allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't update IRTEs if APICv/AVIC is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64, x86: make kvm_arch_has_irq_bypass() inline (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the KVM headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow building irqbypass.ko as as module when kvm.ko is a module (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Wrap sanity check on number of TDP MMU pages with KVM_PROVE_MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add option to rseq test to override /dev/cpu_dma_latency (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Maxim Levitsky) [RHEL-82917] {CVE-2025-23141}
  - Documentation: kvm: remove KVM_CAP_MIPS_TE (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: organize capabilities in the right section (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix some definition lists (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: drop "Capability" heading from capabilities (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: give correct name for KVM_CAP_SPAPR_MULTITCE (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: list once tests that are valid on all architectures (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: bring list of exit reasons up to date (Maxim Levitsky) [RHEL-82917]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add infrastructure for secure TSC (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove the unreachable case for 0x80000022 leaf in __do_cpuid_func() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use named operands in inline asm (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Extract checks on entry/exit control pairs to a helper macro (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Invalidate "next" SNP VMSA GPA even on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP vCPU state updates (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Mark VMCB dirty before processing incoming snp_vmsa_gpa (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use guard(mutex) to simplify SNP AP Creation error handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Simplify request+kick logic in SNP AP Creation handling (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Require AP's "requested" SEV_FEATURES to match KVM's view (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Refuse to attempt VRMUN if an SEV-ES+ guest has an invalid VMSA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always set mp_state to RUNNABLE on wakeup from HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Relax assertion on HLT exits if CPU supports Idle HLT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Inject #GP if memory operand for INVPCID is non-canonical (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Remove tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Decouple EPT RWX bits from EPT Violation protection bits (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove EPT_VIOLATIONS_ACC_*_BIT defines (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "UFFDIO_CONINUE" -> "UFFDIO_CONTINUE" (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Maxim Levitsky) [RHEL-82917]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop kvm_arch_sync_events() now that all implementations are nops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fold guts of kvm_arch_sync_events() into kvm_arch_pre_destroy_vm() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unload MMUs during vCPU destruction, not before (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert that a destroyed/freed vCPU is no longer visible (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't load/put vCPU when unloading its MMU during teardown (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-82917]
  - tools headers: Update the x86 headers with the kernel sources (Maxim Levitsky) [RHEL-82917]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Provide helpers to set the error code (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Convert plain error code numbers to defines (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Pass XFD_ERR as pseudo-payload when injecting #NM (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Don't modify guest XFD_ERR if CR0.TS=1 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use a dedicated flow for queueing re-injected exceptions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename and invert async #PF's send_user_only flag to send_always (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't inject PV async #PF if SEND_ALWAYS=0 and guest state is protected (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-82917]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Override TSC_STABLE flag for Xen PV clocks in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Setup Hyper-V TSC page before Xen PV clocks (during clock update) (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove per-vCPU "cache" of its reference pvclock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pass reference pvclock as a param to kvm_setup_guest_pvclock() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Set PVCLOCK_GUEST_STOPPED only for kvmclock, not for Xen PV clock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't bleed PVCLOCK_GUEST_STOPPED across PV clocks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Use guest's copy of pvclock when starting timer (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Process "guest stopped request" once per guest time update (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop local pvclock_flags variable in kvm_guest_time_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Eliminate "handling" of impossible errors during SUSPEND (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update Xen TSC leaves during CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Move kvm_xen_hvm_config field into kvm_xen (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Bury xen_hvm_config behind CONFIG_KVM_XEN=y (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Consult kvm_xen_enabled when checking for Xen MSR writes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Add an #ifdef'd helper to detect writes to Xen MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Restrict hypercall MSR to unofficial synthetic range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Walk rmaps (shadow MMU) without holding mmu_lock when aging gfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add support for lockless walks of rmap SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add infrastructure to allow walking rmaps outside of mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor low level rmap helpers to prep for walking w/o mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Only check gfn age in shadow MMU if indirect_shadow_pages > 0 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip shadow MMU test_young if TDP MMU reports page as young (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Age TDP MMU SPTEs without holding mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always update A/D-disabled SPTEs atomically (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force atomic update if only the Accessed bit is volatile (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Factor out spte atomic bit clearing routine (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow lockless walk of SPTEs when handing aging mmu_notifier event (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add infrastructure for getting vCPU binary stats (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Adjust number of files rlimit for all "standard" VMs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Get VM's binary stats FD when opening VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add struct and helpers to wrap binary stats cache (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Macrofy vm_get_stat() to auto-generate stat name string (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that __vm_get_stat() actually finds a stat (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename kvm_handle_hva_range() (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Defer runtime updates of dynamic CPUID bits until CPUID emulation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Query X86_FEATURE_MWAIT iff userspace owns the CPUID feature bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Apply TSX_CTRL_CPUID_CLEAR if and only if the vCPU has RTM or HLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use for-loop to iterate over XSTATE size entries (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use kvfree_rcu() to free old optimized APIC map (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Close VM's binary stats FD when releasing VM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix mostly theoretical leak of VM's binary stats FD (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-82917]
  - KVM: SEV: Use to_kvm_sev_info() for fetching kvm_sev_info struct (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unused iommu_domain and iommu_noncoherent from kvm_arch (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add helpers for locally (un)blocking IRQs on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add printf attribute to _no_printf() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unneeded semicolon (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add defines for AMD PMU CPUID features and properties (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix printf() format goof in SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure all vCPUs hit -EFAULT during initial RO stage (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Don't rely on DebugSwap to restore host DR0..DR3 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Save host DR masks on CPUs with DebugSwap (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-82917]
  - kvm: retry nx_huge_page_recovery_thread creation (Maxim Levitsky) [RHEL-82917]
  - vhost_task: fix vhost_task_create() documentation (Maxim Levitsky) [RHEL-82917]
  - vhost: return task creation error instead of NULL (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Free vCPUs before freeing VM state (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Maxim Levitsky) [RHEL-82917] {CVE-2025-21839}
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add CPUID tests for Hyper-V features that need in-kernel APIC (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Manage CPUID array in Hyper-V CPUID test's core helper (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mark test_hv_cpuid_e2big() static in Hyper-V CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Maxim Levitsky) [RHEL-82917] {CVE-2025-21779}
  - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Maxim Levitsky) [RHEL-82917]
  - KVM: remove kvm_arch_post_init_vm (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix spelling mistake "initally" -> "initially" (Maxim Levitsky) [RHEL-82917]
  - KVM: Do not restrict the size of KVM-internal memory regions (Maxim Levitsky) [RHEL-82917]
  - kvm: defer huge page recovery vhost task to later (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow all flags for KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop double-underscores from __kvm_set_memory_region() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add a dedicated API for setting KVM-internal memslots (Maxim Levitsky) [RHEL-82917]
  - KVM: Assert slots_lock is held when setting memory regions (Maxim Levitsky) [RHEL-82917]
  - KVM: Open code kvm_set_memory_region() into its sole caller (ioctl() API) (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in svm_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Fix comment of handle_vmx_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Reinstate __exit attribute for vmx_exit() (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Use str_enabled_disabled() helper in sev_hardware_setup() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double RDPKRU when loading host/guest PKRU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use LVT_TIMER instead of an open coded literal (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Support GFN direct bits (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a VM type define for TDX (Maxim Levitsky) [RHEL-82917]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always complete hypercall via function callback (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Honor event priority when emulating PI delivery during VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Use vmcs01's controls shadow to check for IRQ/NMI windows at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop manual vmcs01.GUEST_INTERRUPT_STATUS.RVI check at VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Check for pending INIT/SIPI after entering non-root mode (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Explicitly update vPPR on successful nested VM-Enter (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Allow toggling bits in MSR_IA32_RTIT_CTL when enable bit is cleared (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add information about pending requests to kvm_exit tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add interrupt injection information to the kvm_entry tracepoint (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add test case for MMIO during vectoring on x86 (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add and use a helper function for x86's LIDT (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Handle event vectoring error in check_emulate_instruction() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Try to unprotect and retry on unhandleable emulation failure (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add emulation status for unhandleable exception vectoring (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add function for vectoring error generation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that are enabled at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly track feature flags that require vendor enabling (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "SF" macro to "SCATTERED_F" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop superfluous host XSAVE check when adjusting guest XSAVES caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace (almost) all guest CPUID feature queries with cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Shuffle code to prepare for dropping guest_cpuid_has() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update guest cpu_caps at runtime for dynamic CPUID-based features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Update OS{XSAVE,PKE} bits in guest CPUID irrespective of host support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop unnecessary check that cpuid_entry2_find() returns right leaf (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Avoid double CPUID lookup when updating MWAIT at runtime (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on KVM support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Treat MONTIOR/MWAIT as a "partially emulated" feature (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Extract code for generating per-entry emulated CPUID information (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Initialize guest cpu_caps based on guest CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Replace guts of "governed" features with comprehensive cpu_caps (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename "governed features" helpers to use "guest_cpu_cap" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove all direct usage of cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move kvm_find_cpuid_entry{,_index}() up near cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Always operate on kvm_vcpu data in cpuid_entry2_find() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove unnecessary caching of KVM's PV CPUID base (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Clear PV_UNHALT for !HLT-exiting only when userspace sets CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2 (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that KVM emulates in software (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that ignore host kernel support (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Harden CPU capabilities processing against out-of-scope features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Add a macro to init CPUID features that are 64-bit only (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do reverse CPUID sanity checks in __feature_leaf() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't update PV features caches when enabling enforcement capability (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Zero out PV features cache when the CPUID leaf is not present (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's KVM PV test to match KVM's disabling exits behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Fix a bad TEST_REQUIRE() in x86's KVM PV test (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/pmu: Drop now-redundant refresh() during init() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM stuffs runtime CPUID OS bits on CR4 writes (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Refresh vCPU CPUID cache in __vcpu_get_cpuid_entry() (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu->cpuid is non-NULL when getting CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Update x86's set_sregs_test to match KVM's CPUID enforcement (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Do all post-set CPUID processing during vCPU creation (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Override ARCH for x86_64 instead of using ARCH_DIR (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use canonical $(ARCH) paths for KVM selftests directories (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Provide empty 'all' and 'clean' targets for unsupported ARCHs (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify KVM correctly handles mprotect(PROT_READ) (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a read-only mprotect() phase to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely limit the number of guest loops in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use vcpu_arch_put_guest() in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Enable mmu_stress_test on arm64 (Maxim Levitsky) [RHEL-82917]
  - KVM: sefltests: Explicitly include ucall_common.h in mmu_stress_test.c (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Compute number of extra pages needed in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Only muck with SREGS on x86 in mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rename max_guest_memory_test to mmu_stress_test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Check for a potential unhandled exception iff KVM_RUN succeeded (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Assert that vcpu_{g,s}et_reg() won't truncate (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Return a value from vcpu_get_reg() instead of using an out-param (Maxim Levitsky) [RHEL-82917]
  - KVM: Move KVM_REG_SIZE() definition to common uAPI header (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Remove redundant TLB flush on guest CR4.PGE change (Maxim Levitsky) [RHEL-82917]
  - KVM: SVM: Macrofy SEV=n versions of sev_xxx_guest() (Maxim Levitsky) [RHEL-82917]
  - KVM/x86: add comment to kvm_mmu_do_page_fault() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-82917]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-82917]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Maxim Levitsky) [RHEL-82917] {CVE-2024-58083}
  - Documentation: kvm: fix typo in api.rst (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: let it be known that ignore_msrs is a bad idea (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: don't include '<linux/find.h>' directly (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Maxim Levitsky) [RHEL-82917] {CVE-2024-55881}
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-82917]
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Break CONFIG_KVM_X86's direct dependency on KVM_INTEL || KVM_AMD (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: add back X86_LOCAL_APIC dependency (Maxim Levitsky) [RHEL-82917]
  - Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of setup_vmcs_config()" (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: switch hugepage recovery thread to vhost_task (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: expose MSR_PLATFORM_INFO as a feature MSR (Maxim Levitsky) [RHEL-82917]
  - Documentation: KVM: fix malformed table (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: reorganize introduction (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: replace section numbers with links (Maxim Levitsky) [RHEL-82917]
  - Documentation: kvm: fix a few mistakes (Maxim Levitsky) [RHEL-82917]
  - KVM: powerpc: remove remaining traces of KVM_CAP_PPC_RMA (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop per-VM zapped_obsolete_pages list (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Remove KVM's MMU shrinker (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN if huge page recovery triggered during dirty logging (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Rename make_huge_page_split_spte() to make_small_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Recover TDP MMU huge page mappings in-place instead of zapping (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Refactor TDP MMU iter need resched check (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Demote the WARN on yielded in xxx_cond_resched() to KVM_MMU_WARN_ON (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Check yielded_gfn for forward progress iff resched is needed (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Ensure KVM supports AVX for SEV-ES VMSA FPU test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from SEV smoke test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from state test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual XCR0 configuration from AMX test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Drop manual CR4.OSXSAVE enabling from CR4/CPUID sync test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify XCR0 can be "downgraded" and "upgraded" (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Configure XCR0 to max supported value by default (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Rework OSXSAVE CR4=>CPUID test to play nice with AVX insns (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Mask off OSPKE and OSXSAVE when comparing CPUID entries (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Precisely mask off dynamic fields in CPUID test (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Add a testcase for disabling feature MSRs init quirk (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Verify get/set PERF_CAPABILITIES w/o guest PDMC behavior (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Document an erratum in KVM_SET_VCPU_EVENTS on Intel CPUs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: AMD's IBPB is not equivalent to Intel's IBPB (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Advertise AMD_IBPB_RET to userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside __kvm_set_or_clear_apicv_inhibit() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Fix a comment inside kvm_vcpu_update_apicv() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Batch TLB flushes when zapping collapsible TDP MMU SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop @max_level from kvm_mmu_max_mapping_level() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't emit TLB flushes when aging SPTEs for mmu_notifiers (Maxim Levitsky) [RHEL-82917]
  - KVM: Allow arch code to elide TLB flushes when aging a young page (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set Dirty bit for new SPTEs, even if _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Dedup logic for detecting TLB flushes on leaf SPTE changes (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Stop processing TDP MMU roots for test_age if young SPTE found (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Process only valid TDP MMU roots when aging a gfn range (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use Accessed bit even when _hardware_ A/D bits are disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_dirty_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Set shadow_accessed_mask for EPT even if A/D bits disabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add a dedicated flag to track if A/D bits are globally enabled (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: WARN and flush if resolving a TDP MMU fault clears MMU-writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold mmu_spte_update_no_track() into mmu_spte_update() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop ignored return value from kvm_tdp_mmu_clear_dirty_slot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't flush TLBs when clearing Dirty bit in shadow MMU (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't force flush if SPTE update clears Accessed bit (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Fold all of make_spte()'s writable handling into one if-else (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Always set SPTE's dirty bit if it's created as writable (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Flush remote TLBs iff MMU-writable flag is cleared from RO SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Protect vCPU's "last run PID" with rwlock, not RCU (Maxim Levitsky) [RHEL-82917]
  - KVM: Return '0' directly when there's no task to yield to (Maxim Levitsky) [RHEL-82917]
  - KVM: Rework core loop of kvm_vcpu_on_spin() to use a single for-loop (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Use ARRAY_SIZE for array length (Maxim Levitsky) [RHEL-82917]
  - KVM: selftests: Remove unused macro in the hardware disable test (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Remove the unused variable "gpa" in __invept() (Maxim Levitsky) [RHEL-82917]
  - KVM: Don't grab reference on VM_MIXEDMAP pfns that have a "struct page" (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop APIs that manipulate "struct page" via pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark "struct page" accessed when zapping SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: Make kvm_follow_pfn.refcounted_page a required field (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop gfn_to_pfn() APIs now that all users are gone (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Explicitly require struct page memory for Ultravisor sharing (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __gfn_to_page() when copying MTE tags to/from userspace (Maxim Levitsky) [RHEL-82917]
  - KVM: Add support for read-only usage of gfn_to_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: Convert gfn_to_page() to use kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_vcpu_map() to map guest memory to patch dcbz instructions (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Remove extra get_page() to fix page refcount leak (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use kvm_faultin_pfn() to handle page faults on Book3s PR (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Book3S: Mark "struct page" pfns dirty/accessed after installing PTE (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Drop unused @kvm_ro param from kvmppc_book3s_instantiate_page() (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s Radix (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: Use __kvm_faultin_pfn() to handle page faults on Book3s HV (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Use __kvm_faultin_pfn() to handle memory aborts (Maxim Levitsky) [RHEL-82917]
  - KVM: arm64: Mark "struct page" pfns accessed/dirty before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock (Maxim Levitsky) [RHEL-82917]
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Use __kvm_faultin_page() to get APIC access page/pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: VMX: Hold mmu_lock until page is released when updating APIC access page (Maxim Levitsky) [RHEL-82917]
  - KVM: Move x86's API to release a faultin page to common KVM (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't mark unused faultin pages as accessed (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put refcounted pages instead of blindly releasing pfns (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Provide "struct page" as output from kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Convert page fault paths to kvm_faultin_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_faultin_pfn() to specifically service guest page faults (Maxim Levitsky) [RHEL-82917]
  - KVM: Move declarations of memslot accessors up in kvm_host.h (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark pages/folios dirty at the origin of make_spte() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add helper to "finish" handling a guest page fault (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add common helper to handle prefetching SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Put direct prefetched pages via kvm_release_page_clean() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Add "mmu" prefix fault-in helpers to free up generic names (Maxim Levitsky) [RHEL-82917]
  - KVM: x86: Don't fault-in APIC access page during initial allocation (Maxim Levitsky) [RHEL-82917]
  - KVM: Disallow direct access (w/o mmu_notifier) to unpinned pfn by default (Maxim Levitsky) [RHEL-82917]
  - KVM: Get writable mapping for __kvm_vcpu_map() only when necessary (Maxim Levitsky) [RHEL-82917]
  - KVM: Pass in write/dirty to kvm_vcpu_map(), not kvm_vcpu_unmap() (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Mark vmcs12's APIC access page dirty when unmapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Pin (as in FOLL_PIN) pages during kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Migrate kvm_vcpu_map() to kvm_follow_pfn() (Maxim Levitsky) [RHEL-82917]
  - KVM: pfncache: Precisely track refcounted pages (Maxim Levitsky) [RHEL-82917]
  - KVM: Move kvm_{set,release}_page_{clean,dirty}() helpers up in kvm_main.c (Maxim Levitsky) [RHEL-82917]
  - KVM: Provide refcounted page as output field in struct kvm_follow_pfn (Maxim Levitsky) [RHEL-82917]
  - KVM: Use plain "struct page" pointer instead of single-entry array (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Drop pointless msr_bitmap_map field from struct nested_vmx (Maxim Levitsky) [RHEL-82917]
  - KVM: nVMX: Rely on kvm_vcpu_unmap() to track validity of eVMCS mapping (Maxim Levitsky) [RHEL-82917]
  - KVM: Use NULL for struct page pointer to indicate mremapped memory (Maxim Levitsky) [RHEL-82917]
  - KVM: Explicitly initialize all fields at the start of kvm_vcpu_map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Remove pointless sanity check on @map param to kvm_vcpu_(un)map() (Maxim Levitsky) [RHEL-82917]
  - KVM: Introduce kvm_follow_pfn() to eventually replace "gfn_to_pfn" APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop unused "hva" pointer from __gfn_to_pfn_memslot() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Drop kvm_page_fault.hva, i.e. don't track intermediate hva (Maxim Levitsky) [RHEL-82917]
  - KVM: Replace "async" pointer in gfn=>pfn with "no_wait" and error code (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop extra GUP (via check_user_page_hwpoison()) to detect poisoned page (Maxim Levitsky) [RHEL-82917]
  - KVM: Return ERR_SIGPENDING from hva_to_pfn() if GUP returns -EGAIN (Maxim Levitsky) [RHEL-82917]
  - KVM: Annotate that all paths in hva_to_pfn() might sleep (Maxim Levitsky) [RHEL-82917]
  - KVM: Drop @atomic param from gfn=>pfn and hva=>pfn APIs (Maxim Levitsky) [RHEL-82917]
  - KVM: Rename gfn_to_page_many_atomic() to kvm_prefetch_pages() (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Use gfn_to_page_many_atomic() when prefetching indirect PTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark page/folio accessed only when zapping leaf SPTEs (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark folio dirty when creating SPTE, not when zapping/modifying (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Mark new SPTE as Accessed when synchronizing existing SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Invert @can_unsync and renamed to @synchronizing (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Maxim Levitsky) [RHEL-82917]
  - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE (Maxim Levitsky) [RHEL-82917]
  - KVM: Add kvm_release_page_unused() API to put pages that KVM never consumes (Maxim Levitsky) [RHEL-82917]
  - x86/virt: Move SEV-specific parsing into arch/x86/virt/svm (Maxim Levitsky) [RHEL-82917]
  - KVM: s390: selftests: Add regression tests for SORTL and DFLTCC CPU subfunctions (Maxim Levitsky) [RHEL-82917]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-101.el10]
changelog:
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-99005] {CVE-2025-21991}
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97117] {CVE-2025-37799}
  - scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96279]
  - scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96279]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-91254]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Phil Auld) [RHEL-92921]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Set need_freq_update in ignore_dl_rate_limit() (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Phil Auld) [RHEL-92921]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Phil Auld) [RHEL-92921]
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-92921]
  - include/{topology,cpuset}: Move dl_rebuild_rd_accounting to cpuset.h (Phil Auld) [RHEL-92921]
  - sched/topology: Stop exposing partition_sched_domains_locked (Phil Auld) [RHEL-92921]
  - cgroup/cpuset: Remove partition_and_rebuild_sched_domains (Phil Auld) [RHEL-92921]
  - sched/topology: Remove redundant dl_clear_root_domain call (Phil Auld) [RHEL-92921]
  - sched/deadline: Rebuild root domain accounting after every update (Phil Auld) [RHEL-92921]
  - sched/deadline: Generalize unique visiting of root domains (Phil Auld) [RHEL-92921]
  - sched/topology: Wrappers for sched_domains_mutex (Phil Auld) [RHEL-92921]
  - sched/deadline: Ignore special tasks when rebuilding domains (Phil Auld) [RHEL-92921]
  - tracing: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - x86: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - s390: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - powerpc: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - Revert "powerpc: traps: Use PREEMPT_RT" (Phil Auld) [RHEL-92921]
  - arm64: Rely on generic printing of preemption model (Phil Auld) [RHEL-92921]
  - lib/dump_stack: Use preempt_model_str() (Phil Auld) [RHEL-92921]
  - sched: Add a generic function to return the preemption string (Phil Auld) [RHEL-92921]
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Phil Auld) [RHEL-92921]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Phil Auld) [RHEL-92921]
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Phil Auld) [RHEL-92921]
  - rseq: Fix rseq unregistration regression (Phil Auld) [RHEL-92921]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Phil Auld) [RHEL-92921]
  - sched/membarrier: Fix redundant load of membarrier_state (Phil Auld) [RHEL-92921]
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Phil Auld) [RHEL-92921]
  - freezer, sched: Report frozen tasks as 'D' instead of 'R' (Phil Auld) [RHEL-92921]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89481]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89481]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89481]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89481]
  - redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94973]
  - PCI/TPH: Restore TPH Requester Enable correctly (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add TPH documentation (CKI Backport Bot) [RHEL-94973]
  - PCI/TPH: Add Steering Tag support (CKI Backport Bot) [RHEL-94973]
  - PCI: Add TLP Processing Hints (TPH) support (CKI Backport Bot) [RHEL-94973]
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Eder Zulian) [RHEL-92470]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92667]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-92667]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-92667]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-92667]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-92667]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-92667]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-92667]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-92667]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-92667]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-92667]
  - crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72768 RHEL-84366]
  - crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72768]
  - crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72768]
  - crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72768]
  - crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72768]
  - crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72768]
  - crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72768]
  - crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72768]
  - crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72768]
  - crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72768]
  - crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72768]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72768]
  - redhat: automotive: remove tech preview message (Scott Weaver) [RHEL-77268]
  - redhat: automotive: define CONFIG_RH_AUTOMOTIVE (Scott Weaver) [RHEL-77268]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-101
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - lpfc: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-102.el10]
changelog:
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72657]
  - emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72657]
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72657]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83569]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83569]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83569]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83569]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83569]
  - ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-91256]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-84547]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-84547]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84547]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84547]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84547]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-84037]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-103.el10]
changelog:
  - redhat/spec: package full bpftool in selftests (Gregory Bell) [RHEL-91378]
  - redhat: add more namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-95481]
  - selftests/memfd/memfd_test: fix possible NULL pointer dereference (Joel Savitz) [RHEL-94834]
  - mr: consolidate the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-96599]
  - ipv6: Align behavior across nexthops during path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (CKI Backport Bot) [RHEL-96599]
  - ipv6: Do not consider link down nexthops in path selection (CKI Backport Bot) [RHEL-96599]
  - ipv6: Start path selection from the first nexthop (CKI Backport Bot) [RHEL-96599]
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-96599] {CVE-2025-22063}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94045]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94045]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94045]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94045]
  - scsi: usb: Rename the RESERVE and RELEASE constants (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94045]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94045]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94045]
  - net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94831]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94831]
  - net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94831]
  - net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94831]
  - net: ena: Remove deadcode (Dennis Chen) [RHEL-94831]
  - net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94831]
  - ena: Link queues to NAPIs (Dennis Chen) [RHEL-94831]
  - ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94831]
  - mm: fix finish_fault() handling for large folios (Aristeu Rozanski) [RHEL-83854]
  - selftests/bpf: Remove with_addr.sh and with_tunnels.sh (Jerome Marchand) [RHEL-78201]
  - Build cpp selftests without source fortification (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix implicit memfd_create() for bionic (Jerome Marchand) [RHEL-78201]
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Jerome Marchand) [RHEL-78201]
  - selftests: bpf: test batch lookup on array of maps with holes (Jerome Marchand) [RHEL-78201]
  - bpf: skip non exist keys in generic_map_lookup_batch (Jerome Marchand) [RHEL-78201]
  - bpf: Handle allocation failure in acquire_lock_state (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Disambiguate get_constant_map_key() errors (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: Test constant key extraction on irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Do not extract constant map keys for irrelevant maps (Jerome Marchand) [RHEL-78201]
  - bpf: Fix softlockup in arena_map_free on 64k page kernel (Jerome Marchand) [RHEL-78201 RHEL-83206] {CVE-2025-21851}
  - bpf: Fix deadlock when freeing cgroup storage (Jerome Marchand) [RHEL-78201 RHEL-83311] {CVE-2024-58088}
  - bpf: avoid holding freeze_mutex during mmap operation (Jerome Marchand) [RHEL-78201 RHEL-83351] {CVE-2025-21853}
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add some tests related to 'may_goto 0' insns (Jerome Marchand) [RHEL-78201]
  - bpf: Remove 'may_goto 0' instruction in opt_remove_nops() (Jerome Marchand) [RHEL-78201]
  - bpf: Allow 'may_goto 0' instruction in verifier (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add test case for the freeing of bpf_timer (Jerome Marchand) [RHEL-78201]
  - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpf: Free element after unlock in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Bail out early in __htab_map_lookup_and_delete_elem() (Jerome Marchand) [RHEL-78201]
  - bpf: Free special fields after unlock in htab_lru_map_delete_node() (Jerome Marchand) [RHEL-78201]
  - libbpf: Work around kernel inconsistently stripping '.llvm.' suffix (Jerome Marchand) [RHEL-78201]
  - bpf: selftests: verifier: Add nullness elision tests (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Support eliding map lookup nullness (Jerome Marchand) [RHEL-78201]
  - bpf: verifier: Add missing newline on verbose() call (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix return zero when elf_begin failed (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test (Jerome Marchand) [RHEL-78201]
  - veristat: Load struct_ops programs only once (Jerome Marchand) [RHEL-78201]
  - bpf: Send signals asynchronously if !preemptible (Jerome Marchand) [RHEL-78201]
  - veristat: Document verifier log dumping capability (Jerome Marchand) [RHEL-78201]
  - bpftool: Fix control flow graph segfault during edge creation (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add a test for kprobe multi with unique_match (Jerome Marchand) [RHEL-78201]
  - libbpf: Add unique_match option for multi kprobe (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_local_storage_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_selem_alloc() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable,enable} in bpf_cpumask_release() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in bpf_obj_free_fields() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration before calling ops->map_free() (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration in bpf_selem_free_rcu (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when cloning sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying sock storage (Jerome Marchand) [RHEL-78201]
  - bpf: Disable migration when destroying inode storage (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_task_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from bpf_cgrp_storage_lock helpers (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in htab_elem_free (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} in ->map_for_each_callback (Jerome Marchand) [RHEL-78201]
  - bpf: Remove migrate_{disable|enable} from LPM trie (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add kprobe session recursion check test (Jerome Marchand) [RHEL-78201]
  - bpf: Return error for missed kprobe multi bpf program execution (Jerome Marchand) [RHEL-78201]
  - bpf: Fix range_tree_set() error handling (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -std=gnu11 to BPF_CFLAGS and CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Handle prog/attach type comparison in veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add -fno-strict-aliasing to BPF_CFLAGS (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: test bpf_for within spin lock section (Jerome Marchand) [RHEL-78201]
  - bpf: Allow bpf_for/bpf_repeat calls while holding a spinlock (Jerome Marchand) [RHEL-78201]
  - bpf/tests: Add 32 bits only long conditional jump tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Avoid generating untracked files when running bpf selftests (Jerome Marchand) [RHEL-78201]
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Jerome Marchand) [RHEL-78201]
  - bpf: Use refcount_t instead of atomic_t for mmap_count (Jerome Marchand) [RHEL-78201]
  - bpf: Remove unused MT_ENTRY define (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: fix veristat comp mode with new stats (Jerome Marchand) [RHEL-78201]
  - bpf: Fix holes in special_kfunc_list if !CONFIG_NET (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add testcases for BPF_MUL (Jerome Marchand) [RHEL-78201]
  - bpf, verifier: Improve precision of BPF_MUL (Jerome Marchand) [RHEL-78201]
  - libbpf: Set MFD_NOEXEC_SEAL when creating memfd (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Clear out Python syntax warnings (Jerome Marchand) [RHEL-78201]
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Jerome Marchand) [RHEL-78201]
  - bpftool: Link zstd lib required by libelf (Jerome Marchand) [RHEL-78201]
  - veristat: Fix top source line stat collection (Jerome Marchand) [RHEL-78201]
  - bpf: lsm: Remove hook to bpf_task_storage_free (Jerome Marchand) [RHEL-78201]
  - bpf: Fix configuration-dependent BTF function references (Jerome Marchand) [RHEL-78201]
  - selftest/bpf: Replace magic constants by macros (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add tests for fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - libbpf: prog load: Allow to use fd_array_cnt (Jerome Marchand) [RHEL-78201]
  - bpf: Add fd_array_cnt attribute for prog_load (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor check_pseudo_btf_id (Jerome Marchand) [RHEL-78201]
  - bpf: Move map/prog compatibility checks (Jerome Marchand) [RHEL-78201]
  - bpf: Add a __btf_get_by_fd helper (Jerome Marchand) [RHEL-78201]
  - bpftool: bash: Add bash completion for root_id argument (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Support dumping a specific types from file (Jerome Marchand) [RHEL-78201]
  - bpftool: btf: Validate root_type_ids early (Jerome Marchand) [RHEL-78201]
  - bpftool: man: Add missing format argument to command description (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: make BPF_TARGET_ENDIAN non-recursive to speed up *.bpf.o build (Jerome Marchand) [RHEL-78201]
  - libbpf: Extend linker API to support in-memory ELF files (Jerome Marchand) [RHEL-78201]
  - libbpf: Pull file-opening logic up to top-level functions (Jerome Marchand) [RHEL-78201]
  - bpftool: Probe for ISA v4 instruction set extension (Jerome Marchand) [RHEL-78201]
  - kbuild/btf: Propagate CONFIG_WERROR to resolve_btfids (Jerome Marchand) [RHEL-78201]
  - tools/resolve_btfids: Add --fatal_warnings option (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Fix fill_link_info selftest on powerpc (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add more stats into veristat (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Consolidate kernel modules into common directory (Jerome Marchand) [RHEL-78201]
  - libbpf: Fix segfault due to libelf functions not setting errno (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Add IRQ save/restore tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Expand coverage of preempt tests to sleepable kfunc (Jerome Marchand) [RHEL-78201]
  - bpf: Improve verifier log for resource leak on exit (Jerome Marchand) [RHEL-78201]
  - bpf: Introduce support for bpf_local_irq_{save,restore} (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor mark_{dynptr,iter}_read (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor {acquire,release}_reference_state (Jerome Marchand) [RHEL-78201]
  - bpf: Consolidate locks and reference state in verifier state (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: ensure proper root namespace cleanup when test fail (Jerome Marchand) [RHEL-78201]
  - bpf: Refactor bpf_tracing_func_proto() and remove bpf_get_probe_write_proto() (Jerome Marchand) [RHEL-78201]
  - bpf: Remove bpf_probe_write_user() warning message (Jerome Marchand) [RHEL-78201]
  - libbpf: Improve debug message when the base BTF cannot be found (Jerome Marchand) [RHEL-78201]
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing (Jerome Marchand) [RHEL-78201]
  - samples/bpf: Remove unused variable (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: remove test_flow_dissector.sh (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate bpf flow dissectors tests to test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add network helpers to generate udp checksums (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use the same udp and tcp headers in tests under test_progs (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: document pseudo-header checksum helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: move ip checksum helper to network helpers (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: Enable generic tc actions in selftests config (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: migrate flow_dissector namespace exclusivity test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add gre packets testing to flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: expose all subtests from flow_dissector (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: re-split main function into dedicated tests (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: replace CHECK calls with ASSERT macros in flow_dissector test (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: use ASSERT_MEMEQ to compare bpf flow keys (Jerome Marchand) [RHEL-78201]
  - selftests/bpf: add a macro to compare raw memory (Jerome Marchand) [RHEL-78201]
  - sched/isolation: Make use of more than one housekeeping cpu (Phil Auld) [RHEL-8694]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-104.el10]
changelog:
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89030] {CVE-2025-22104}
  - perf: Fix dangling cgroup pointer in cpuctx (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Michael Petlan) [RHEL-78197]
  - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Simplify release of SDBs and SDBTs (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Rework call to sf_disable() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Fix format string in pr_err() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Use sf_buffer_available() (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Consistently use goto out for function exit (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Do not re-enable event after deletion (Michael Petlan) [RHEL-78197]
  - s390/cpum_sf: Set bit PMU_F_ENABLED enabled after lpp() invocation (Michael Petlan) [RHEL-78197]
  - s390/cpum_cf: Correct typo CYLCE (Michael Petlan) [RHEL-78197]
  - radix-tree: add missing cleanup.h (Michael Petlan) [RHEL-78197]
  - perf tests metric-only perf stat: Fix tests 84 and 86 s390 (Michael Petlan) [RHEL-78197]
  - perf trace: Support --summary-mode=cgroup (Michael Petlan) [RHEL-78197]
  - perf test: Add perf trace summary test (Michael Petlan) [RHEL-78197]
  - perf trace: Implement syscall summary in BPF (Michael Petlan) [RHEL-78197]
  - perf trace: Add missing thread__put() in thread__e_machine() (Michael Petlan) [RHEL-78197]
  - perf trace: Free the files.max entry in files->table (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Michael Petlan) [RHEL-78197]
  - perf trace: Fix leaks of 'struct thread' in fprintf_sys_enter() (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 source package build (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync sound/asound.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync linux/prctl.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/xtensa/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sparc/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/sh/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/arm/tools/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync arch/x86/entry/syscalls/syscall_32.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm-generic/mman.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/cputype.h with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync scripts/syscall.tbl with kernel (Michael Petlan) [RHEL-78197]
  - tools headers UAPI: sync asm/kvm.h with kernel (Michael Petlan) [RHEL-78197]
  - perf tools: Fix in-source libperf build (Michael Petlan) [RHEL-78197]
  - perf tools: Fix arm64 build by generating unistd_64.h (Michael Petlan) [RHEL-78197]
  - tools headers: Update the syscall table with the kernel sources (Michael Petlan) [RHEL-78197]
  - perf tools: Remove evsel__handle_error_quirks() (Michael Petlan) [RHEL-78197]
  - perf libunwind arm64: Fix missing close parens in an if statement (Michael Petlan) [RHEL-78197]
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources (Michael Petlan) [RHEL-78197]
  - tools/include: make uapi/linux/types.h usable from assembly (Michael Petlan) [RHEL-78197]
  - perf bpf-filter: Fix a parsing error with comma (Michael Petlan) [RHEL-78197]
  - perf report: Fix a memory leak for perf_env on AMD (Michael Petlan) [RHEL-78197]
  - perf trace: Fix wrong size to bpf_map__update_elem call (Michael Petlan) [RHEL-78197]
  - perf tools: annotate asm_pure_loop.S (Michael Petlan) [RHEL-78197]
  - perf python: Fix setup.py mypy errors (Michael Petlan) [RHEL-78197]
  - perf test: Address attr.py mypy error (Michael Petlan) [RHEL-78197]
  - perf build: Add pylint build tests (Michael Petlan) [RHEL-78197]
  - perf build: Add mypy build tests (Michael Petlan) [RHEL-78197]
  - perf build: Rename TEST_LOGS to SHELL_TEST_LOGS (Michael Petlan) [RHEL-78197]
  - tools/build: Don't pass test log files to linker (Michael Petlan) [RHEL-78197]
  - perf bench sched pipe: fix enforced blocking reads in worker_thread (Michael Petlan) [RHEL-78197]
  - perf build: filter all combinations of -flto for libperl (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: AmpereOne/AmpereOneX: Mark LD_RETIRED impacted by errata (Michael Petlan) [RHEL-78197]
  - perf trace: Fix evlist memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Fix BTF memory leak (Michael Petlan) [RHEL-78197]
  - perf trace: Make syscall table stable (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Mask off ABI type for MIPS system calls (Michael Petlan) [RHEL-78197]
  - perf build: Remove Makefile.syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Use lookup table containing multiple architectures (Michael Petlan) [RHEL-78197]
  - perf trace beauty: Add syscalltbl.sh generating all system call tables (Michael Petlan) [RHEL-78197]
  - perf thread: Add support for reading the e_machine type for a thread (Michael Petlan) [RHEL-78197]
  - perf dso: Add support for reading the e_machine type for a dso (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove struct syscalltbl (Michael Petlan) [RHEL-78197]
  - perf trace: Reorganize syscalls (Michael Petlan) [RHEL-78197]
  - perf syscalltbl: Remove syscall_table.h (Michael Petlan) [RHEL-78197]
  - perf dso: kernel-doc for enum dso_binary_type (Michael Petlan) [RHEL-78197]
  - perf dso: Move libunwind dso_data variables into ifdef (Michael Petlan) [RHEL-78197]
  - perf report: Disable children column for data type profiling (Michael Petlan) [RHEL-78197]
  - perf report: Allow hierarchy mode for --children (Michael Petlan) [RHEL-78197]
  - perf sort: Keep output fields in the same level (Michael Petlan) [RHEL-78197]
  - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-78197]
  - perf: intel-tpebs: Fix incorrect usage of zfree() (Michael Petlan) [RHEL-78197]
  - perf cpumap: Increment reference count for online cpumap (Michael Petlan) [RHEL-78197]
  - perf dso: fix dso__is_kallsyms() check (Michael Petlan) [RHEL-78197]
  - perf kwork: Remove unreachable judgments (Michael Petlan) [RHEL-78197]
  - perf python: Check if there is space to copy all the event (Michael Petlan) [RHEL-78197]
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Michael Petlan) [RHEL-78197]
  - perf python: Decrement the refcount of just created event on failure (Michael Petlan) [RHEL-78197]
  - perf python tracepoint.py: Change the COMM using setproctitle if available (Michael Petlan) [RHEL-78197]
  - perf python: Fixup description of sample.id event member (Michael Petlan) [RHEL-78197]
  - perf test dso-data: Correctly free test file in read test (Michael Petlan) [RHEL-78197]
  - perf dso: Use lock annotations to fix asan deadlock (Michael Petlan) [RHEL-78197]
  - perf mutex: Add annotations for LOCKS_EXCLUDED and LOCKS_RETURNED (Michael Petlan) [RHEL-78197]
  - perf test: Add pipe output testing for annotate (Michael Petlan) [RHEL-78197]
  - perf test: Fixes to variable expansion and stdout for diff test (Michael Petlan) [RHEL-78197]
  - perf libunwind: Fixup conversion perf_sample->user_regs to a pointer (Michael Petlan) [RHEL-78197]
  - perf script: Update brstack syntax documentation (Michael Petlan) [RHEL-78197]
  - perf script: Fix typo in branch event mask (Michael Petlan) [RHEL-78197]
  - perf hist stdio: Do bounds check when printing callchains to avoid UB with new gcc versions (Michael Petlan) [RHEL-78197]
  - perf units: Fix insufficient array space (Michael Petlan) [RHEL-78197]
  - perf annotate: Add --code-with-type option. (Michael Petlan) [RHEL-78197]
  - perf annotate: Implement code + data type annotation (Michael Petlan) [RHEL-78197]
  - perf annotate: Factor out __hist_entry__get_data_type() (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass hist_entry to annotate functions (Michael Petlan) [RHEL-78197]
  - perf annotate: Pass annotation_options to annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate: Remove unused len parameter from annotation_line__print() (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Add annotated_data_type__get_member_name() (Michael Petlan) [RHEL-78197]
  - perf ftrace: Use atomic inc to update histogram in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Remove an unnecessary condition check in BPF (Michael Petlan) [RHEL-78197]
  - perf ftrace: Fix latency stats with BPF (Michael Petlan) [RHEL-78197]
  - perf test stat: Additional topdown grouping tests (Michael Petlan) [RHEL-78197]
  - perf x86 evlist: Update comments on topdown regrouping (Michael Petlan) [RHEL-78197]
  - perf parse-events: Corrections to topdown sorting (Michael Petlan) [RHEL-78197]
  - perf tools: Improve handling of hybrid PMUs in perf_event_attr__fprintf (Michael Petlan) [RHEL-78197]
  - perf python tracepoint: Switch to using parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist.config to set up record options (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist all_cpus accessor (Michael Petlan) [RHEL-78197]
  - perf python: Avoid duplicated code in get_tracepoint_field (Michael Petlan) [RHEL-78197]
  - perf python: Update ungrouped evsel leader in clone (Michael Petlan) [RHEL-78197]
  - perf python: Add optional cpus and threads arguments to parse_events (Michael Petlan) [RHEL-78197]
  - perf python: Add member access to a number of evsel variables (Michael Petlan) [RHEL-78197]
  - perf python: Add evlist enable and disable methods (Michael Petlan) [RHEL-78197]
  - perf evlist: Add success path to evlist__create_syswide_maps (Michael Petlan) [RHEL-78197]
  - perf debug: Avoid stack overflow in recursive error message (Michael Petlan) [RHEL-78197]
  - perf symbol: Support .gnu_debugdata for symbols (Michael Petlan) [RHEL-78197]
  - perf tools: Add LZMA decompression from FILE (Michael Petlan) [RHEL-78197]
  - perf tools: Add dummy functions for !HAVE_LZMA_SUPPORT (Michael Petlan) [RHEL-78197]
  - perf mem: Don't leak mem event names (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P650 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive P550 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x0d events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Add SiFive Bullet version 0x07 events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Update SiFive Bullet events (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Remove leading zeroes (Michael Petlan) [RHEL-78197]
  - perf vendor events riscv: Rename U74 to Bullet (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_config__refresh (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_pmus__default_pmu_name (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_data__update_dir (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused pstack__pop (Michael Petlan) [RHEL-78197]
  - perf util: Remove unused perf_color_default_config (Michael Petlan) [RHEL-78197]
  - perf tests: Fix data symbol test with LTO builds (Michael Petlan) [RHEL-78197]
  - perf report: Fix memory leaks in the hierarchy mode (Michael Petlan) [RHEL-78197]
  - perf report: Use map_symbol__copy() when copying callchains (Michael Petlan) [RHEL-78197]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Michael Petlan) [RHEL-78197]
  - perf annotate: Add annotation_options.disassembler_used (Michael Petlan) [RHEL-78197]
  - perf report: Do not process non-JIT BPF ksymbol events (Michael Petlan) [RHEL-78197]
  - perf test: Fix leak in "Synthesize attr update" test (Michael Petlan) [RHEL-78197]
  - perf machine: Fix insertion of PERF_RECORD_KSYMBOL related kernel maps (Michael Petlan) [RHEL-78197]
  - perf maps: Add missing map__set_kmap_maps() when replacing a kernel map (Michael Petlan) [RHEL-78197]
  - perf maps: Fixup maps_by_name when modifying maps_by_address (Michael Petlan) [RHEL-78197]
  - perf maps: Set the kmaps for newly created/added kernel maps (Michael Petlan) [RHEL-78197]
  - perf script: Fix output type for dynamically allocated core PMU's (Michael Petlan) [RHEL-78197]
  - perf bench: Fix perf bench syscall loop count (Michael Petlan) [RHEL-78197]
  - perf test: Simplify data symbol test (Michael Petlan) [RHEL-78197]
  - perf test: Add timeout to datasym workload (Michael Petlan) [RHEL-78197]
  - perf test: Add trace record and replay test (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf trace tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test trace_btf_general: Fix shellcheck warning (Michael Petlan) [RHEL-78197]
  - perf trace: Add tests for BTF general augmentation (Michael Petlan) [RHEL-78197]
  - perf test: Skip perf probe tests when running as non-root (Michael Petlan) [RHEL-78197]
  - perf test: Add --metric-only to perf stat output tests (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Support previous branch target (PBT) address (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Add branch stack (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Set sample flags with supplement info (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fill branch operations and events to record (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Decode transactional event (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Extend branch operations (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Fix load-store operation checking (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branch stack (Michael Petlan) [RHEL-78197]
  - perf script: Add not taken event for branches (Michael Petlan) [RHEL-78197]
  - perf script: Separate events from branch types (Michael Petlan) [RHEL-78197]
  - perf script: Refactor sample_flags_to_name() function (Michael Petlan) [RHEL-78197]
  - perf script: Make printing flags reliable (Michael Petlan) [RHEL-78197]
  - perf stat: Fix non-uniquified hybrid legacy events (Michael Petlan) [RHEL-78197]
  - perf tools: Skip BPF sideband event for userspace profiling (Michael Petlan) [RHEL-78197]
  - perf test: Fix spelling mistake "sythesizing" -> "synthesizing" (Michael Petlan) [RHEL-78197]
  - perf build: Fix in-tree build due to symbolic link (Michael Petlan) [RHEL-78197]
  - perf arm-spe: Report error if set frequency (Michael Petlan) [RHEL-78197]
  - perf lock: Report owner stack in usermode (Michael Petlan) [RHEL-78197]
  - perf lock: Make rb_tree helper functions generic (Michael Petlan) [RHEL-78197]
  - perf lock: Retrieve owner callstack in bpf program (Michael Petlan) [RHEL-78197]
  - perf lock: Add bpf maps for owner stack tracing (Michael Petlan) [RHEL-78197]
  - perf cpumap: Reduce cpu size from int to int16_t (Michael Petlan) [RHEL-78197]
  - perf list: Document -v option deduplication feature (Michael Petlan) [RHEL-78197]
  - perf pmu: Don't double count common sysfs and json events (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: allow to hide empty buckets (Michael Petlan) [RHEL-78197]
  - perf ftrace latency: variable histogram buckets (Michael Petlan) [RHEL-78197]
  - perf annotate-data: Handle direct use of stack pointer without fbreg (Michael Petlan) [RHEL-78197]
  - perf report: Fix sample number stats for branch entry mode (Michael Petlan) [RHEL-78197]
  - perf machine: Reuse module path buffer (Michael Petlan) [RHEL-78197]
  - perf hwmon_pmu: Switch event discovery to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Switch tracepoints to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf events: Remove scandir in thread synthesis (Michael Petlan) [RHEL-78197]
  - perf header: Switch mem topology to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf maps: Switch modules tree walk to io_dir__readdir (Michael Petlan) [RHEL-78197]
  - perf parse-events: Tidy name token matching (Michael Petlan) [RHEL-78197]
  - perf tools: Improve startup time by reducing unnecessary stat() calls (Michael Petlan) [RHEL-78197]
  - perf report: Fix input reload/switch with symbol sort key (Michael Petlan) [RHEL-78197]
  - perf report: Support switching data w/ and w/o callchains (Michael Petlan) [RHEL-78197]
  - perf report: Switch data file correctly in TUI (Michael Petlan) [RHEL-78197]
  - perf tools: Fix up some comments and code to properly use the event_source bus (Michael Petlan) [RHEL-78197]
  - perf list: Also append PMU name in verbose mode (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Fix incorrect CPU_CYCLE in metrics expr (Michael Petlan) [RHEL-78197]
  - perf hist: Shrink struct hist_entry size (Michael Petlan) [RHEL-78197]
  - perf test: Add tests for latency and parallelism profiling (Michael Petlan) [RHEL-78197]
  - perf report: Add latency and parallelism profiling documentation (Michael Petlan) [RHEL-78197]
  - perf report: Add --latency flag (Michael Petlan) [RHEL-78197]
  - perf report: Add latency output field (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism filter (Michael Petlan) [RHEL-78197]
  - perf report: Switch filtered from u8 to u16 (Michael Petlan) [RHEL-78197]
  - perf report: Add parallelism sort key (Michael Petlan) [RHEL-78197]
  - perf report: Add machine parallelism (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compile error on sample->user_regs (Michael Petlan) [RHEL-78197]
  - perf tools: Fix compilation error on arm64 (Michael Petlan) [RHEL-78197]
  - tools build: Fix a number of Wconversion warnings (Michael Petlan) [RHEL-78197]
  - perf sample: Make user_regs and intr_regs optional (Michael Petlan) [RHEL-78197]
  - perf test stat_all_metrics: Ensure missing events fail test (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-78197]
  - perf tools: Use symfs when opening debuginfo by path (Michael Petlan) [RHEL-78197]
  - perf trace: Add --summary-mode option (Michael Petlan) [RHEL-78197]
  - perf tools: Get rid of now-unused rb_resort.h (Michael Petlan) [RHEL-78197]
  - perf trace: Convert syscall_stats to hashmap (Michael Petlan) [RHEL-78197]
  - perf trace: Allocate syscall stats only if summary is on (Michael Petlan) [RHEL-78197]
  - perf tools: Deadcode removal (Michael Petlan) [RHEL-78197]
  - perf stat: Changes to event name uniquification (Michael Petlan) [RHEL-78197]
  - perf stat: Don't merge counters purely on name (Michael Petlan) [RHEL-78197]
  - perf test: Use cycles event in perf record test for leader_sampling (Michael Petlan) [RHEL-78197]
  - perf test: Fix perf record test for precise_max (Michael Petlan) [RHEL-78197]
  - perf: Always feature test reallocarray (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add V3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf vendor events arm64: Add N3 events/metrics (Michael Petlan) [RHEL-78197]
  - perf trace: Fix return value of trace__fprintf_tp_fields (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Michael Petlan) [RHEL-78197] {CVE-2025-37936}
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Only check the group flag for X86 leader (Michael Petlan) [RHEL-78197]
  - perf/core: Change to POLLERR for pinned events with error (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Michael Petlan) [RHEL-78197]
  - perf: Fix hang while freeing sigtrap event (Michael Petlan) [RHEL-78197] {CVE-2025-37747}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Michael Petlan) [RHEL-78197] {CVE-2025-37878}
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc/pmu: Update comment description to mention ISA v3.1 for power10 and above (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Add check for power11 pvr for pmu selfests (Michael Petlan) [RHEL-78197]
  - tools/testing/selftests/powerpc: Enable pmu selftests for power11 (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Michael Petlan) [RHEL-78197]
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Michael Petlan) [RHEL-78197]
  - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-78197]
  - perf: arm_pmu: Move PMUv3-specific data (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Replace Pentium 4 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/mm/pat: Replace Intel x86_model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 5 model checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace Family 15 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/cpu/intel: Replace early Family 6 checks with VFM ones (Michael Petlan) [RHEL-78197]
  - x86/microcode: Update the Intel processor flag scan check (Michael Petlan) [RHEL-78197]
  - x86/cpu: Update Intel Family comments (Michael Petlan) [RHEL-78197]
  - perf/x86/intel, x86/cpu: Simplify Intel PMU initialization (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Use cache cpu-type for hybrid PMU selection (Michael Petlan) [RHEL-78197]
  - perf: Clean up pmu specific data (Michael Petlan) [RHEL-78197]
  - perf/x86: Remove swap_task_ctx() (Michael Petlan) [RHEL-78197]
  - perf/x86/lbr: Fix shorter LBRs call stacks for the system-wide mode (Michael Petlan) [RHEL-78197]
  - perf: Supply task information to sched_task() (Michael Petlan) [RHEL-78197]
  - perf: attach/detach PMU specific data (Michael Petlan) [RHEL-78197]
  - locking/percpu-rwsem: Add guard support (Michael Petlan) [RHEL-78197]
  - perf: Save PMU specific data in task_struct (Michael Petlan) [RHEL-78197]
  - perf: Extend per event callchain limit to branch stack (Michael Petlan) [RHEL-78197]
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Michael Petlan) [RHEL-78197]
  - perf/core: Use POLLHUP for pinned events in error (Michael Petlan) [RHEL-78197]
  - perf/core: Use sysfs_emit() instead of scnprintf() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove optional 'size' arguments from strscpy() calls (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Check if bts_ctx is allocated when calling BTS functions (Michael Petlan) [RHEL-78197]
  - perf/x86: Annotate struct bts_buffer::buf with __counted_by() (Michael Petlan) [RHEL-78197]
  - perf/core: Clean up perf_try_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Fix perf_mmap() failure path (Michael Petlan) [RHEL-78197]
  - perf/core: Detach 'struct perf_cpu_pmu_context' and 'struct pmu' lifetimes (Michael Petlan) [RHEL-78197]
  - perf/core: Lift event->mmap_mutex in perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Remove retry loop from perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Further simplify perf_mmap() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_mmap() control flow (Michael Petlan) [RHEL-78197]
  - perf/bpf: Robustify perf_event_free_bpf_prog() (Michael Petlan) [RHEL-78197]
  - perf/core: Introduce perf_free_addr_filters() (Michael Petlan) [RHEL-78197]
  - perf/core: Add this_cpc() helper (Michael Petlan) [RHEL-78197]
  - perf/core: Merge struct pmu::pmu_disable_count into struct perf_cpu_pmu_context::pmu_disable_count (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_event_alloc() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_init_event() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify perf_pmu_register() (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_pmu_register() error path (Michael Petlan) [RHEL-78197]
  - perf/core: Simplify the perf_event_alloc() error path (Michael Petlan) [RHEL-78197]
  - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Michael Petlan) [RHEL-78197]
  - perf/x86/intel/bts: Allocate bts_ctx only if necessary (Michael Petlan) [RHEL-78197]
  - perf/core: Move perf_event sysctls into kernel/events (Michael Petlan) [RHEL-78197]
  - const_structs.checkpatch: add ctl_table (Michael Petlan) [RHEL-78197]
  - sysctl: make internal ctl_tables const (Michael Petlan) [RHEL-78197]
  - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Update DTLB/PageSize decode logic (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add support for OP Load Latency Filtering (Michael Petlan) [RHEL-78197]
  - x86/events/amd/iommu: Increase IOMMU_NAME_SIZE (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Support PEBS counters snapshotting (Michael Petlan) [RHEL-78197]
  - perf: Avoid the read if the count is already updated (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Michael Petlan) [RHEL-78197]
  - perf/x86/intel: Apply static call for drain_pebs (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Ceil sample_period to min_period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add ->check_period() callback (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Add PMU specific minimum period (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Don't allow freq mode event creation through ->config interface (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove pointless sample period check (Michael Petlan) [RHEL-78197]
  - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros (Michael Petlan) [RHEL-78197]
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix nid mismatch in alloc_surplus_hugetlb_folio() (Nico Pache) [RHEL-77742]
  - mm: (un)track_pfn_copy() fix + doc improvements (Nico Pache) [RHEL-77742]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix deadlock on cpu_hotplug_lock in __accept_page() (Nico Pache) [RHEL-77742]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Nico Pache) [RHEL-77742] {CVE-2025-37774}
  - mm: fix apply_to_existing_page_range() (Nico Pache) [RHEL-77742]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Nico Pache) [RHEL-77742]
  - mm/hugetlb: fix set_max_huge_pages() when there are surplus pages (Nico Pache) [RHEL-77742]
  - mm/compaction: fix bug in hugetlb handling pathway (Nico Pache) [RHEL-77742]
  - mm: lock PGDAT_RECLAIM_LOCKED with acquire memory ordering (Nico Pache) [RHEL-77742]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Nico Pache) [RHEL-77742]
  - mm/hugetlb: update nr_huge_pages and surplus_huge_pages together (Nico Pache) [RHEL-77742]
  - mm: remove the access_ok() call from gup_fast_fallback() (Nico Pache) [RHEL-77742]
  - mm/damon/ops: have damon_get_folio return folio even for tail pages (Nico Pache) [RHEL-77742]
  - mm, percpu: do not consider sleepable allocations atomic (Nico Pache) [RHEL-77742]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (Nico Pache) [RHEL-77742] {CVE-2025-22090}
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Nico Pache) [RHEL-77742]
  - mm: slub: call WARN() when detecting a slab corruption (Nico Pache) [RHEL-77742]
  - mm: slub: Print the broken data before restoring them (Nico Pache) [RHEL-77742]
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Nico Pache) [RHEL-77742]
  - memcg: drain obj stock on cpu hotplug teardown (Nico Pache) [RHEL-77742]
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs (Nico Pache) [RHEL-77742] {CVE-2025-22000}
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Nico Pache) [RHEL-77742]
  - mm/vma: do not register private-anon mappings with khugepaged during mmap (Nico Pache) [RHEL-77742]
  - mm/migrate: fix shmem xarray update during migration (Nico Pache) [RHEL-77742] {CVE-2025-22015}
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page() (Nico Pache) [RHEL-77742]
  - filemap: move prefaulting out of hot write path (Nico Pache) [RHEL-77742]
  - Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[] for empty zone" (Nico Pache) [RHEL-77742]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Nico Pache) [RHEL-77742] {CVE-2025-21908}
  - mm: abort vma_modify() on merge out of memory failure (Nico Pache) [RHEL-77742] {CVE-2025-21932}
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Nico Pache) [RHEL-77742] {CVE-2025-21931}
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Nico Pache) [RHEL-77742]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Nico Pache) [RHEL-77742] {CVE-2025-21907}
  - mm: hugetlb: avoid fallback for specific node allocation of 1G pages (Nico Pache) [RHEL-77742]
  - memcg: avoid dead loop when setting memory.max (Nico Pache) [RHEL-77742]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Nico Pache) [RHEL-77742]
  - mm: gup: fix infinite loop within __get_longterm_locked (Nico Pache) [RHEL-77742]
  - kfence: skip __GFP_THISNODE allocations on NUMA systems (Nico Pache) [RHEL-77742]
  - mm: kmemleak: fix upper boundary check for physical address objects (Nico Pache) [RHEL-77742]
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios (Nico Pache) [RHEL-77742]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Nico Pache) [RHEL-77742] {CVE-2025-21815}
  - mm/hugetlb: don't map folios writable without VM_WRITE when copying during fork() (Nico Pache) [RHEL-77742]
  - readahead: properly shorten readahead when falling back to do_page_cache_ra() (Nico Pache) [RHEL-77742]
  - readahead: don't shorten readahead window in read_pages() (Nico Pache) [RHEL-77742]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-81470] {CVE-2025-21759}
  - netfilter: ipset: fix region locking in hash types (CKI Backport Bot) [RHEL-96611]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-92771]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-92771]
  - selftests: net: use slowwait to make sure IPv6 setup finished (Hangbin Liu) [RHEL-83477]
  - selftests: net: use slowwait to stabilize vrf_route_leaking test (Hangbin Liu) [RHEL-84202]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Chunyu Hu) [RHEL-87655]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Chunyu Hu) [RHEL-87655]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Chunyu Hu) [RHEL-87655]
  - scsi: lpfc: Copyright updates for 14.4.0.9 patches (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Update lpfc version to 14.4.0.9 (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Create lpfc_vmid_info sysfs entry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Notify FC transport of rport disappearance during PCI fcn reset (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Use memcpy() for BIOS version (Dick Kennedy) [RHEL-89473]
  - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag (Dick Kennedy) [RHEL-89473]
  - selftests: netfilter: nft_queue.sh: include file transfer duration in log message (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_queue.sh: fix warnings with socat 1.8.0.0 (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: run conntrack_dump_flush in netns (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: Add missing gitignore file (CKI Backport Bot) [RHEL-99472]
  - selftests: netfilter: nft_nat.sh: add test for reverse clash with nat (CKI Backport Bot) [RHEL-99656]
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (CKI Backport Bot) [RHEL-99656]
  - ipvs: fix uninit-value for saddr in do_output_route4 (CKI Backport Bot) [RHEL-99471]
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (CKI Backport Bot) [RHEL-99471]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-105.el10]
changelog:
  - loop: move lo_set_size() out of queue freeze (Ming Lei) [RHEL-88159]
  - scsi: qla2xxx: Update version to 10.02.09.400-k (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Nilesh Javali) [RHEL-90558]
  - scsi: qla2xxx: Fix abort in bsg timeout (Nilesh Javali) [RHEL-90558]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-106.el10]
changelog:
  - net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Paolo Abeni) [RHEL-96601]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96294]
  - exfat: fix random stack corruption after get_block (CKI Backport Bot) [RHEL-99440] {CVE-2025-22036}
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-74410]
  - rust: add helper for mutex_trylock (Maxim Levitsky) [RHEL-74410]
  - RISC-V: KVM: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-74410]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-74410]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-74410]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-74410]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-74410]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-74410]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (CKI Backport Bot) [RHEL-72661]
  - selftests: bonding: add ipvlan over bond testing (CKI Backport Bot) [RHEL-96617]
  - selftests: net: lib: Add a couple autodefer helpers (CKI Backport Bot) [RHEL-96617]
  - selftests: net: lib: Add several autodefer helpers (CKI Backport Bot) [RHEL-96617]
  - selftests: net: lib: Rename ip_link_master() to ip_link_set_master() (CKI Backport Bot) [RHEL-96617]
  - bonding: Fix multiple long standing offload races (Hangbin Liu) [RHEL-73802]
  - bonding: Mark active offloaded xfrm_states (Hangbin Liu) [RHEL-73802]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Hangbin Liu) [RHEL-73802]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Hangbin Liu) [RHEL-73802]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Hangbin Liu) [RHEL-73802]
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Hangbin Liu) [RHEL-73802]
  - xfrm: always initialize offload path (Hangbin Liu) [RHEL-73802]
  - xfrm: check for PMTU in tunnel mode for packet offload (Hangbin Liu) [RHEL-73802]
  - xfrm: provide common xdo_dev_offload_ok callback implementation (Hangbin Liu) [RHEL-73802]
  - xfrm: rely on XFRM offload (Hangbin Liu) [RHEL-73802 RHEL-97184]
  - xfrm: simplify SA initialization routine (Hangbin Liu) [RHEL-73802]
  - xfrm: delay initialization of offload path till its actually requested (Hangbin Liu) [RHEL-73802]
  - ynl: devlink: add missing board-serial-number (Petr Oros) [RHEL-75601]
  - devlink: fix xa_alloc_cyclic() error handling (Petr Oros) [RHEL-75601]
  - devlink: add devl guard (Petr Oros) [RHEL-75601]
  - pldmfw: enable selected component update (Petr Oros) [RHEL-75601]
  - devlink: Improve the port attributes description (Petr Oros) [RHEL-75601]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-75601]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-75601]
  - devlink: Add documentation for OcteonTx2 AF (Petr Oros) [RHEL-75601]
  - devlink: remove unused devlink_resource_register() (Petr Oros) [RHEL-75601]
  - devlink: remove unused devlink_resource_occ_get_register() and _unregister() (Petr Oros) [RHEL-75601]
  - net: dsa: replace devlink resource registration calls by devl_ variants (Petr Oros) [RHEL-75601]
  - devlink: region: snapshot IDs: consolidate error values (Petr Oros) [RHEL-75601]
  - devlink: devl_resource_register(): differentiate error codes (Petr Oros) [RHEL-75601]
  - devlink: use devlink_nl_put_u64() helper (Petr Oros) [RHEL-75601]
  - devlink: introduce devlink_nl_put_u64() (Petr Oros) [RHEL-75601]
  - tools: ynl-gen: use names of constants in generated limits (Petr Oros) [RHEL-75601]
  - tools: ynl-gen: refactor check validation for TypeBinary (Petr Oros) [RHEL-75601]
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-74388]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-74388]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-74388]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-74388]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-107.el10]
changelog:
  - spec: fix spec warning for /usr/include/ynl (Alexandra Hájková) [RHEL-101712]
  - nvme: avoid creating multipath sysfs group under namespace path devices (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: make nvme_pci_npages_prp() __always_inline (Maurizio Lombardi) [RHEL-95382]
  - nvme: unblock ctrl state transition for firmware update (Maurizio Lombardi) [RHEL-95382]
  - nvmet-tcp: don't restore null sk_state_change (Maurizio Lombardi) [RHEL-95382]
  - nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
  - nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
  - nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: fix queue unquiesce check on slot_reset (Maurizio Lombardi) [RHEL-95382]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-95382]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-95382]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-95382]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-95382]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-95382]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-95382]
  - nvme/ioctl: move fixed buffer lookup to nvme_uring_cmd_io() (Maurizio Lombardi) [RHEL-95382]
  - nvme/ioctl: move blk_mq_free_request() out of nvme_map_user_request() (Maurizio Lombardi) [RHEL-95382]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-95382]
  - nvme: convert timeouts to secs_to_jiffies() (Maurizio Lombardi) [RHEL-95382]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-95382]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-95382]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-95382]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-95382]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-95382]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-95382]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-95382]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-95382]
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101330] {CVE-2025-38089}
  - net: fix udp gso skb_segment after pull from frag_list (Paolo Abeni) [RHEL-96626]
  - net: ipv6: fix UDPv6 GSO segmentation with NAT (Paolo Abeni) [RHEL-96626]
  - softirq: use bit waits instead of var waits. (Phil Auld) [RHEL-96261]
  - sched: add wait_var_event_io() (Phil Auld) [RHEL-96261]
  - sched: Add wait/wake interface for variable updated under a lock. (Phil Auld) [RHEL-96261]
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Phil Auld) [RHEL-96261]
  - sched: Document wait_var_event() family of functions and wake_up_var() (Phil Auld) [RHEL-96261]
  - sched: Improve documentation for wake_up_bit/wait_on_bit family of functions (Phil Auld) [RHEL-96261]
  - sched: change wake_up_bit() and related function to expect unsigned long * (Phil Auld) [RHEL-96261]
  - net-timestamp: COMPLETION timestamp on packet tx completion (Petr Oros) [RHEL-100002]
  - net: skb: free up one bit in tx_flags (Petr Oros) [RHEL-100002]
  - selftests/bpf: Add simple bpf tests in the tx path for timestamping feature (Petr Oros) [RHEL-100002]
  - bpf: Support selective sampling for bpf timestamping (Petr Oros) [RHEL-100002]
  - bpf: Add BPF_SOCK_OPS_TSTAMP_SENDMSG_CB callback (Petr Oros) [RHEL-100002]
  - bpf: Add BPF_SOCK_OPS_TSTAMP_ACK_CB callback (Petr Oros) [RHEL-100002]
  - bpf: Add BPF_SOCK_OPS_TSTAMP_SND_HW_CB callback (Petr Oros) [RHEL-100002]
  - bpf: Add BPF_SOCK_OPS_TSTAMP_SND_SW_CB callback (Petr Oros) [RHEL-100002]
  - bpf: Add BPF_SOCK_OPS_TSTAMP_SCHED_CB callback (Petr Oros) [RHEL-100002]
  - net-timestamp: Prepare for isolating two modes of SO_TIMESTAMPING (Petr Oros) [RHEL-100002]
  - bpf: Disable unsafe helpers in TX timestamping callbacks (Petr Oros) [RHEL-100002]
  - bpf: Prevent unsafe access to the sock fields in the BPF timestamping callback (Petr Oros) [RHEL-100002]
  - bpf: Prepare the sock_ops ctx and call bpf prog for TX timestamping (Petr Oros) [RHEL-100002]
  - bpf: Add networking timestamping support to bpf_get/setsockopt() (Petr Oros) [RHEL-100002]
  - selftests: txtimestamp: add SCM_TS_OPT_ID test (Petr Oros) [RHEL-100002]
  - net_tstamp: add SCM_TS_OPT_ID for RAW sockets (Petr Oros) [RHEL-100002]
  - net_tstamp: add SCM_TS_OPT_ID to provide OPT_ID in control message (Petr Oros) [RHEL-100002]
  - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (CKI Backport Bot) [RHEL-99477]
  - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (CKI Backport Bot) [RHEL-99477]
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (CKI Backport Bot) [RHEL-99477]
  - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (CKI Backport Bot) [RHEL-99477]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (CKI Backport Bot) [RHEL-99477]
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (CKI Backport Bot) [RHEL-99477]
  - netfilter: nft_inner: Use nested-BH locking for nft_pcpu_tun_ctx (CKI Backport Bot) [RHEL-99473]
  - netfilter: nft_tunnel: fix geneve_opt dump (CKI Backport Bot) [RHEL-99473]
  - netfilter: nft_quota: match correctly when the quota just depleted (CKI Backport Bot) [RHEL-99473]
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (CKI Backport Bot) [RHEL-99473]
  - netfilter: nf_tables: don't unregister hook when table is dormant (CKI Backport Bot) [RHEL-99473]
  - redhat/configs: enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-78258]
  - mm: pgtable: fix incorrect reclaim of non-empty PTE pages (Luiz Capitulino) [RHEL-78258]
  - x86: select ARCH_SUPPORTS_PT_RECLAIM if X86_64 (Luiz Capitulino) [RHEL-78258]
  - x86: mm: free page table pages by RCU instead of semi RCU (Luiz Capitulino) [RHEL-78258]
  - mm: pgtable: reclaim empty PTE page in madvise(MADV_DONTNEED) (Luiz Capitulino) [RHEL-78258]
  - mm: make zap_pte_range() handle full within-PMD range (Luiz Capitulino) [RHEL-78258]
  - mm: do_zap_pte_range: return any_skipped information to the caller (Luiz Capitulino) [RHEL-78258]
  - mm: zap_install_uffd_wp_if_needed: return whether uffd-wp pte has been re-installed (Luiz Capitulino) [RHEL-78258]
  - mm: skip over all consecutive none ptes in do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
  - mm: introduce do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
  - mm: introduce zap_nonpresent_ptes() (Luiz Capitulino) [RHEL-78258]
  - mm: userfaultfd: recheck dst_pmd entry in move_pages_pte() (Luiz Capitulino) [RHEL-78258]
  - mm: khugepaged: recheck pmd state in retract_page_tables() (Luiz Capitulino) [RHEL-78258]
  - docs/mm: add VMA locks documentation (Luiz Capitulino) [RHEL-78258]
  - redhat/configs: enable CONFIG_TCG_SVSM (Stefano Garzarella) [RHEL-92271]
  - x86/sev: Register tpm-svsm platform device (Stefano Garzarella) [RHEL-92271]
  - tpm: Add SNP SVSM vTPM driver (Stefano Garzarella) [RHEL-92271]
  - svsm: Add header with SVSM_VTPM_CMD helpers (Stefano Garzarella) [RHEL-92271]
  - x86/sev: Add SVSM vTPM probe/send_command functions (Stefano Garzarella) [RHEL-92271]
  - KVM: arm64: VHE: Synchronize CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: VHE: Synchronize restore of host debug registers (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Explicitly treat routing entry type changes as changes (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: vgic-init: Plug vCPU vs. VGIC creation race (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Unmap vLPIs affected by changes to GSI routing information (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Resolve vLPI by host IRQ in vgic_v4_unset_forwarding() (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Protect vLPI translation with vgic_irq::irq_lock (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Use lock guard in vgic_v4_set_forwarding() (Sebastian Ott) [RHEL-92805]
  - arm64: Add override for MPAM (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Drop sort_memblock_regions() (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Switch to use hrtimer_setup() (Sebastian Ott) [RHEL-92805]
  - tools headers UAPI: Sync linux/kvm.h with the kernel sources (Sebastian Ott) [RHEL-92805]
  - KVM: selftests: Confirm exposing MTE_frac does not break migration (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Make MTE_frac masking conditional on MTE capability (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Expose MTE_frac so that it is visible to KVM (Sebastian Ott) [RHEL-92805]
  - redhat/configs: Enable CONFIG_AMPERE_ERRATUM_AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
  - arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue (Sebastian Ott) [RHEL-92805]
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
  - arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Add register fields for HFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Add register fields for HFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Add register fields for HFGITR2_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Add register fields for HDFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Add register fields for HDFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Allow userspace to request KVM_ARM_VCPU_EL2* (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Document NV caps and vcpu flags (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: selftests: Determine effective counter width in arch_timer_edge_cases (Sebastian Ott) [RHEL-84459 RHEL-92805]
  - KVM: arm64: selftests: Fix xVAL init in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: selftests: Fix thread migration in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: selftests: Fix help text for arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
  - smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI (Sebastian Ott) [RHEL-92805]
  - arm64: Rework checks for broken Cavium HW in the PI code (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: selftest: Don't try to disable AArch64 support (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Fix memory check in host_stage2_set_owner_locked() (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Kill HCRX_HOST_FLAGS (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Properly save/restore HCRX_EL2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Prevent userspace from disabling AArch64 support at any virtualisable EL (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Force HCR_EL2.xMO to 1 at all times in VHE mode (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() (Sebastian Ott) [RHEL-88996 RHEL-92805]
  - KVM: arm64: Use acquire/release to communicate FF-A version negotiation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Don't translate FAR if invalid/unsafe (Sebastian Ott) [RHEL-92805]
  - arm64: Convert HPFAR_EL2 to sysreg table (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Only read HPFAR_EL2 when value is architecturally valid (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: PMU: Reload when resetting (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: PMU: Reload when user modifies registers (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: PMU: Fix SET_ONE_REG for vPMC regs (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: PMU: Assume PMU presence in pmu-emul.c (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Create each pKVM hyp vcpu after its corresponding host vcpu (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Initialize HCRX_EL2 traps in pKVM (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Factor out setting HCRX_EL2 traps into separate function (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Count pKVM stage-2 usage in secondary pagetable stats (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Distinct pKVM teardown memcache for stage-2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Add flags to kvm_hyp_memcache (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: selftests: Test that TGRAN*_2 fields are writable (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Allow userspace to write ID_AA64MMFR0_EL1.TGRAN*_2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: ptdump: Test PMD_TYPE_MASK for block mapping (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Provide 1 event counter on IMPDEF hardware (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Remap PMUv3 events onto hardware (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Advertise PMUv3 if IMPDEF traps are present (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Compute synthetic sysreg ESR for Apple PMUv3 traps (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Move PMUVer filtering into KVM code (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Use guard() to cleanup usage of arm_pmus_lock (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Drop kvm_arm_pmu_available static key (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Use a cpucap to determine if system supports FEAT_PMUv3 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Always support SW_INCR PMU event (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Compute PMCEID from arm_pmu's event bitmaps (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Fix documentation for KVM_CAP_ARM_WRITABLE_IMP_ID_REGS (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Copy MIDR_EL1 into hyp VM when it is writable (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Copy guest CTR_EL0 into hyp VM (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Fail KVM init if asking for NV without GICv3 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Allow userland to set VGIC maintenance IRQ (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Fold GICv3 host trapping requirements into guest setup (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Propagate used_lrs between L1 and L0 contexts (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Request vPE doorbell upon nested ERET to L2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Respect virtual HCR_EL2.TWx setting (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Add Maintenance Interrupt emulation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Handle L2->L1 transition on interrupt injection (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Nested GICv3 emulation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Sanitise ICH_HCR_EL2 accesses (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Plumb handling of GICv3 EL2 accesses (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Add ICH_*_EL2 registers to vpcu_sysreg (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: nv: Load timer before the GIC (Sebastian Ott) [RHEL-92805]
  - arm64: sysreg: Add layout for ICH_MISR_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64: sysreg: Add layout for ICH_VTR_EL2 (Sebastian Ott) [RHEL-92805]
  - arm64: sysreg: Add layout for ICH_HCR_EL2 (Sebastian Ott) [RHEL-92805]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
  - smccc/kvm_guest: Enable errata based on implementation CPUs (Sebastian Ott) [RHEL-92805]
  - arm64: Make  _midr_in_range_list() an exported function (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Specify hypercall ABI for retrieving target implementations (Sebastian Ott) [RHEL-92805]
  - arm64: Modify _midr_range() functions to read MIDR/REVIDR internally (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Document ordering requirements for irqbypass (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: vgic-v4: Fall back to software irqbypass if LPI not found (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: vgic-v4: Only WARN for HW IRQ mismatch when unmapping vLPI (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: vgic-v4: Only attempt vLPI mapping for actual MSIs (Sebastian Ott) [RHEL-92805]
  - KVM: selftests: arm64: Test writes to MIDR,REVIDR,AIDR (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Allow userspace to change the implementation ID registers (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Maintain per-VM copy of implementation ID regs (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Advertise FEAT_ECV when possible (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Make ID_AA64MMFR4_EL1.NV_frac writable (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Allow userspace to limit NV support to nVHE (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Move NV-specific capping to idreg sanitisation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Enforce NV limits on a per-idregs basis (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Make ID_REG_LIMIT_FIELD_ENUM() more widely available (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Consolidate idreg callbacks (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Advertise NV2 in the boot messages (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Mark HCR.EL2.{NV*,AT} RES0 when ID_AA64MMFR4_EL1.NV_frac is 0 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Mark HCR.EL2.E2H RES0 when ID_AA64MMFR1_EL1.VH is zero (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Sebastian Ott) [RHEL-92805]
  - arm64: cpufeature: Handle NV_frac as a synonym of NV2 (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Mark some header functions as inline (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Refactor exit handlers (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Refactor CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Drop pkvm_mem_transition for host/hyp donations (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Drop pkvm_mem_transition for host/hyp sharing (Sebastian Ott) [RHEL-92805]
  - KVM: arm64: Drop pkvm_mem_transition for FF-A (Sebastian Ott) [RHEL-92805]
  - Revert "net: skb: introduce and use a single page frag cache" (Paolo Abeni) [RHEL-90322]
  - net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [RHEL-90322]
  - net: avoid unconditionally touching sk_tsflags on RX (Paolo Abeni) [RHEL-90322]
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Jeff Moyer) [RHEL-75487] {CVE-2025-21655}
  - io_uring/eventfd: abstract out ev_fd put helper (Jeff Moyer) [RHEL-75487]
  - xen: balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
  - hv_balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
  - balloon_compaction: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
  - meminfo: add a per node counter for balloon drivers (Nico Pache) [RHEL-70690]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-108.el10]
changelog:
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70322]
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (CKI Backport Bot) [RHEL-96382] {CVE-2025-37958}
  - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Ming Lei) [RHEL-100484]
  - nfsd: use threads array as-is in netlink interface (Benjamin Coddington) [RHEL-96874]
  - igc: fix lock order in igc_ptp_reset (Corinna Vinschen) [RHEL-83571]
  - igc: set the RX packet buffer size for TSN mode (Corinna Vinschen) [RHEL-83571]
  - igc: use FIELD_PREP and GENMASK for existing RX packet buffer size (Corinna Vinschen) [RHEL-83571]
  - igc: optimize TX packet buffer utilization for TSN mode (Corinna Vinschen) [RHEL-83571]
  - igc: use FIELD_PREP and GENMASK for existing TX packet buffer size (Corinna Vinschen) [RHEL-83571]
  - igc: rename I225_RXPBSIZE_DEFAULT and I225_TXPBSIZE_DEFAULT (Corinna Vinschen) [RHEL-83571]
  - igc: rename xdp_get_tx_ring() for non-xdp usage (Corinna Vinschen) [RHEL-83571]
  - igc: enable HW vlan tag insertion/stripping by default (Corinna Vinschen) [RHEL-83571]
  - igc: add lock preventing multiple simultaneous PTM transactions (Corinna Vinschen) [RHEL-83571]
  - igc: cleanup PTP module if probe fails (Corinna Vinschen) [RHEL-83571]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Corinna Vinschen) [RHEL-83571]
  - igc: move ktime snapshot into PTM retry loop (Corinna Vinschen) [RHEL-83571]
  - igc: increase wait time before retrying PTM (Corinna Vinschen) [RHEL-83571]
  - igc: fix PTM cycle trigger logic (Corinna Vinschen) [RHEL-83571]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83571]
  - igc: Fix XSK queue NAPI ID mapping (Corinna Vinschen) [RHEL-83571]
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Corinna Vinschen) [RHEL-83571]
  - igc: Fix HW RX timestamp when passed by ZC XDP (Corinna Vinschen) [RHEL-83571]
  - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process (Corinna Vinschen) [RHEL-83571]
  - igc: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83571]
  - igc: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83571]
  - igc: Fix passing 0 to ERR_PTR in igc_xdp_run_prog() (Corinna Vinschen) [RHEL-83571]
  - igc: Allow hot-swapping XDP program (Corinna Vinschen) [RHEL-83571]
  - igc: return early when failing to read EECD register (Corinna Vinschen) [RHEL-83571]
  - igc: Remove unused igc_read/write_pcie_cap_reg (Corinna Vinschen) [RHEL-83571]
  - igc: Remove unused igc_read/write_pci_cfg wrappers (Corinna Vinschen) [RHEL-83571]
  - igc: Remove unused igc_acquire/release_nvm (Corinna Vinschen) [RHEL-83571]
  - igc: remove autoneg parameter from igc_mac_info (Corinna Vinschen) [RHEL-83571]
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-96620]
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Paolo Abeni) [RHEL-96620]
  - redhat: enable test_kmod, test_module and install kmod selftests (Herton R. Krzesinski) [RHEL-94012]
  - lib/test_kmod: do not hardcode/depend on any filesystem (Herton R. Krzesinski) [RHEL-94012]
  - igb: Get rid of spurious interrupts (Corinna Vinschen) [RHEL-83570]
  - igb: Add support for persistent NAPI config (Corinna Vinschen) [RHEL-83570]
  - igb: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83570]
  - igb: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83570]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83570]
  - igb: reject invalid external timestamp requests for 82580-based HW (Corinna Vinschen) [RHEL-83570]
  - igb: Fix passing 0 to ERR_PTR in igb_run_xdp() (Corinna Vinschen) [RHEL-83570]
  - igb: Add AF_XDP zero-copy Tx support (Corinna Vinschen) [RHEL-83570]
  - igb: Add AF_XDP zero-copy Rx support (Corinna Vinschen) [RHEL-83570]
  - igb: Add XDP finalize and stats update functions (Corinna Vinschen) [RHEL-83570]
  - igb: Introduce XSK data structures and helpers (Corinna Vinschen) [RHEL-83570]
  - igb: Introduce igb_xdp_is_enabled() (Corinna Vinschen) [RHEL-83570]
  - igb: Remove static qualifiers (Corinna Vinschen) [RHEL-83570]
  - igbvf: remove unused spinlock (Corinna Vinschen) [RHEL-83570]
  - igb: Fix 2 typos in comments in igb_main.c (Corinna Vinschen) [RHEL-83570]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-80095]
  - scsi: storvsc: Increase the timeouts to storvsc_timeout (Maxim Levitsky) [RHEL-80095]
  - PCI: hv: Remove unnecessary flex array in struct pci_packet (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Always select CONFIG_SYSFB for Hyper-V guests (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Remove hv_alloc/free_* helpers (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Use kzalloc for panic page allocation (Maxim Levitsky) [RHEL-80095]
  - uio_hv_generic: Use correct size for interrupt and monitor pages (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (Maxim Levitsky) [RHEL-80095]
  - arch/x86: Provide the CPU number in the wakeup AP callback (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap() (Maxim Levitsky) [RHEL-80095]
  - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-80095]
  - net: mana: Add support for auxiliary device servicing events (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: unify mana_ib functions to support any gdma device (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (Maxim Levitsky) [RHEL-80095]
  - net: mana: Probe rdma device in mana driver (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: support of the zero based MRs (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Access remote atomic for MRs (Maxim Levitsky) [RHEL-80095]
  - net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-80095]
  - net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Fix integer overflow during queue creation (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-80095]
  - net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Use safer allocation function() (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Implement DMABUF MR support (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Fix error code in probe() (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Add port statistics support (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: indicate CM support (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: polling of CQs for GSI/UD (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: extend mana QP table (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: implement req_notify_cq (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: UD/GSI work requests (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: create/destroy AH (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: UD/GSI QP creation for kernel (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Create and destroy UD/GSI QP (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: create kernel-level CQs (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: helpers to allocate kernel queues (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: implement get_dma_mr (Maxim Levitsky) [RHEL-80095]
  - RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (Maxim Levitsky) [RHEL-80095]
  - net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-80095]
  - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-80095]
  - net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-80095]
  - net/mana: fix warning in the writer of client oob (Maxim Levitsky) [RHEL-80095]
  - net: mana: cleanup mana struct after debugfs_remove() (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Remove rmsg_pgcnt (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Replace one-element array with flexible array member (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-80095]
  - hv_netvsc: Don't assume cpu_possible_mask is dense (Maxim Levitsky) [RHEL-80095]
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Maxim Levitsky) [RHEL-80095] {CVE-2024-53103}
  - hv_balloon: Fallback to generic_online_page() for non-HV hot added mem (Maxim Levitsky) [RHEL-80095]
  - scsi: storvsc: Don't report the host packet status as the hv status (Maxim Levitsky) [RHEL-80095]
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Maxim Levitsky) [RHEL-80095] {CVE-2025-21690}
  - scsi: storvsc: Don't assume cpu_possible_mask is dense (Maxim Levitsky) [RHEL-80095]
  - uio_hv_generic: Add a check for HV_NIC for send, receive buffers setup (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Make the sysfs node size for the ring buffer dynamic (Maxim Levitsky) [RHEL-80095]
  - uio_hv_generic: Fix sysfs creation path for ring buffer (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Fix bad ref to hv_synic_eventring_tail when CPU goes offline (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: fix an indentation issue in mshyperv.h (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Add comments about hv_vpset and var size hypercall input args (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Fix check of return value from snp_set_vmsa() (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Add VTL mode callback for restarting the system (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Add VTL mode emergency restart callback (Maxim Levitsky) [RHEL-80095]
  - hyperv: Remove unused union and structs (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Use named operands in inline asm (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Introduce mshv_root module to expose /dev/mshv to VMMs (Maxim Levitsky) [RHEL-80095]
  - hyperv: Add definitions for root partition driver to hv headers (Maxim Levitsky) [RHEL-80095]
  - x86: hyperv: Add mshv_handler() irq handler and setup function (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Introduce per-cpu event ring tail (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Export some functions for use by root partition module (Maxim Levitsky) [RHEL-80095]
  - acpi: numa: Export node_to_pxm() (Maxim Levitsky) [RHEL-80095]
  - hyperv: Introduce hv_recommend_using_aeoi() (Maxim Levitsky) [RHEL-80095]
  - arm64/hyperv: Add some missing functions to arm64 (Maxim Levitsky) [RHEL-80095]
  - x86/mshyperv: Add support for extended Hyper-V features (Maxim Levitsky) [RHEL-80095]
  - hyperv: Log hypercall status codes as strings (Maxim Levitsky) [RHEL-80095]
  - hyperv: Add CONFIG_MSHV_ROOT to gate root partition support (Maxim Levitsky) [RHEL-80095]
  - hyperv: Change hv_root_partition into a function (Maxim Levitsky) [RHEL-80095]
  - hyperv: Convert hypercall statuses to linux error codes (Maxim Levitsky) [RHEL-80095]
  - PCI: hv: Correct a comment (Maxim Levitsky) [RHEL-80095]
  - drivers/hv: add CPU offlining support (Maxim Levitsky) [RHEL-80095]
  - drivers/hv: introduce vmbus_channel_set_cpu() (Maxim Levitsky) [RHEL-80095]
  - cpu: export lockdep_assert_cpus_held() (Maxim Levitsky) [RHEL-80095]
  - hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (Maxim Levitsky) [RHEL-80095]
  - hyperv: Move hv_current_partition_id to arch-generic code (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Fix output argument to hypercall that changes page visibility (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Maxim Levitsky) [RHEL-80095]
  - hyperv: Do not overlap the hvcall IO areas in hv_vtl_apicid_to_vp_id() (Maxim Levitsky) [RHEL-80095]
  - hyperv: Do not overlap the hvcall IO areas in get_vtl() (Maxim Levitsky) [RHEL-80095]
  - hyperv: Enable the hypercall output page for the VTL mode (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: vmbus: Log on missing offers if any (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: vmbus: Wait for boot-time offers during boot and resume (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: Don't assume cpu_possible_mask is dense (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Don't assume cpu_possible_mask is dense (Maxim Levitsky) [RHEL-80095]
  - hyperv: Remove the now unused hyperv-tlfs.h files (Maxim Levitsky) [RHEL-80095]
  - hyperv: Switch from hyperv-tlfs.h to hyperv/hvhdk.h (Maxim Levitsky) [RHEL-80095]
  - hyperv: Add new Hyper-V headers in include/hyperv (Maxim Levitsky) [RHEL-80095]
  - hyperv: Clean up unnecessary #includes (Maxim Levitsky) [RHEL-80095]
  - hyperv: Move hv_connection_id to hyperv-tlfs.h (Maxim Levitsky) [RHEL-80095]
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Maxim Levitsky) [RHEL-80095] {CVE-2024-55916}
  - Drivers: hv: util: Don't force error code to ENODEV in util_probe() (Maxim Levitsky) [RHEL-80095]
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Maxim Levitsky) [RHEL-80095]
  - scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (Karan Kumar) [RHEL-95446]
  - scsi: fnic: Set appropriate logging level for log message (Karan Kumar) [RHEL-95446]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (Karan Kumar) [RHEL-95446]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (Karan Kumar) [RHEL-95446]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (Karan Kumar) [RHEL-95446]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-109.el10]
changelog:
  - powerpc64/ftrace: fix module loading without patchable function entries (Viktor Malik) [RHEL-24555]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Viktor Malik) [RHEL-24555]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Viktor Malik) [RHEL-24555]
  - powerpc64/bpf: Add support for bpf trampolines (Viktor Malik) [RHEL-24555]
  - samples/ftrace: Add support for ftrace direct samples on powerpc (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Viktor Malik) [RHEL-24555]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Viktor Malik) [RHEL-24555]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Viktor Malik) [RHEL-24555]
  - powerpc64/ftrace: Move ftrace sequence out of line (Viktor Malik) [RHEL-24555]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Viktor Malik) [RHEL-24555]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Viktor Malik) [RHEL-24555]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Viktor Malik) [RHEL-24555]
  - powerpc/module_64: Convert #ifdef to IS_ENABLED() (Viktor Malik) [RHEL-24555]
  - powerpc32/ftrace: Unify 32-bit and 64-bit ftrace entry code (Viktor Malik) [RHEL-24555]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Viktor Malik) [RHEL-24555]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Viktor Malik) [RHEL-24555]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Viktor Malik) [RHEL-24555]
  - ACPI: video: Fix random crashes due to bad kfree() (Mark Langsdorf) [RHEL-102414]
  - bpf: verifier: Refactor helper access type tracking (Jerome Marchand) [RHEL-93930]
  - selftests/bpf: Convert test_sysctl to prog_tests (Jerome Marchand) [RHEL-93930]
  - bpf: Specify access type of bpf_sysctl_get_name args (Jerome Marchand) [RHEL-93930]
  - selftests: netfilter: nft_fib.sh: add type and oif tests with and without VRFs (CKI Backport Bot) [RHEL-88574]
  - netfilter: nf_tables: nft_fib: consistent l3mdev handling (CKI Backport Bot) [RHEL-88574]
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (CKI Backport Bot) [RHEL-88574]
  - selftests: netfilter: move fib vrf test to nft_fib.sh (CKI Backport Bot) [RHEL-88574]
  - selftests: netfilter: nft_fib.sh: add 'type' mode tests (CKI Backport Bot) [RHEL-88574]
  - selftests: netfilter: nft_fib.sh: check lo packets bypass fib lookup (CKI Backport Bot) [RHEL-88574]
  - netfilter: nf_tables: add packets conntrack state to debug trace info (CKI Backport Bot) [RHEL-87758]
  - netfilter: conntrack: make nf_conntrack_id callable without a module dependency (CKI Backport Bot) [RHEL-87758]
  - tracing: fprobe events: Fix possible UAF on modules (Jerome Marchand) [RHEL-86682]
  - tracing: gfp: vsprintf: Do not print "none" when using %pGg printf format (Jerome Marchand) [RHEL-86682]
  - tracing: tprobe-events: Fix leakage of module refcount (Jerome Marchand) [RHEL-86682]
  - tracing: tprobe-events: Fix to clean up tprobe correctly when module unload (Jerome Marchand) [RHEL-86682]
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro (Jerome Marchand) [RHEL-86682]
  - tracing: tprobe-events: Reject invalid tracepoint name (Jerome Marchand) [RHEL-86682]
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval (Jerome Marchand) [RHEL-86682]
  - tracing: gfp: Remove duplication of recording GFP flags (Jerome Marchand) [RHEL-86682]
  - ftrace: Do not add duplicate entries in subops manager ops (Jerome Marchand) [RHEL-86682]
  - ftrace: Fix accounting of adding subops to a manager ops (Jerome Marchand) [RHEL-86682]
  - ftrace: Correct preemption accounting for function tracing. (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Update pages_touched to reflect persistent buffer content (Jerome Marchand) [RHEL-86682]
  - tracing: Do not allow mmap() of persistent ring buffer (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Validate the persistent meta data subbuf array (Jerome Marchand) [RHEL-81450 RHEL-86682] {CVE-2025-21777}
  - tracing: Have the error of __tracing_resize_ring_buffer() passed to user (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Unlock resize on mmap error (Jerome Marchand) [RHEL-86682]
  - fgraph: Fix set_graph_notrace with setting TRACE_GRAPH_NOTRACE_BIT (Jerome Marchand) [RHEL-86682]
  - ftrace: Avoid potential division by zero in function_stat_show() (Jerome Marchand) [RHEL-86682]
  - tracing/osnoise: Fix resetting of tracepoints (Jerome Marchand) [RHEL-86682] {CVE-2025-21733}
  - ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg() (Jerome Marchand) [RHEL-86682]
  - tracing: gfp: Fix the GFP enum values shown for user space tracing tools (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Make reading page consistent with the code logic (Jerome Marchand) [RHEL-86682]
  - selftests/ftrace: Fix to use remount when testing mount GID option (Jerome Marchand) [RHEL-86682]
  - tracing: Fix using ret variable in tracing_set_tracer() (Jerome Marchand) [RHEL-86682]
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (Jerome Marchand) [RHEL-86682]
  - ftrace: Fix function profiler's filtering functionality (Jerome Marchand) [RHEL-86682]
  - fgraph: Add READ_ONCE() when accessing fgraph_array[] (Jerome Marchand) [RHEL-86682]
  - tracing: Have process_string() also allow arrays (Jerome Marchand) [RHEL-86682]
  - tracing: Switch trace.c code over to use guard() (Jerome Marchand) [RHEL-86682]
  - trace/ring-buffer: Do not use TP_printk() formatting for boot mapped buffers (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Fix overflow in __rb_map_vma (Jerome Marchand) [RHEL-86682]
  - tracing: Check "%s" dereference via the field and not the TP_printk format (Jerome Marchand) [RHEL-86682]
  - tracing: Add "%s" check in test_event_printk() (Jerome Marchand) [RHEL-86682]
  - tracing: Add missing helper functions in event pointer dereference check (Jerome Marchand) [RHEL-86682]
  - tracing: Fix test_event_printk() to process entire print argument (Jerome Marchand) [RHEL-86682]
  - tracing: Prevent bad count for tracing_cpumask_write (Jerome Marchand) [RHEL-86682]
  - fgraph: Still initialize idle shadow stacks when starting (Jerome Marchand) [RHEL-86682]
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Jerome Marchand) [RHEL-86682]
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Jerome Marchand) [RHEL-86682]
  - selftests/ftrace: adjust offset for kprobe syntax error test (Jerome Marchand) [RHEL-86682]
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Jerome Marchand) [RHEL-86682]
  - tracing: Constify string literal data member in struct trace_event_call (Jerome Marchand) [RHEL-86682]
  - ftrace: Fix regression with module command in stack_trace_filter (Jerome Marchand) [RHEL-86682]
  - tracing: Fix function name for trampoline (Jerome Marchand) [RHEL-86682]
  - ring-buffer: Limit time with disabled interrupts in rb_check_pages() (Jerome Marchand) [RHEL-86682]
  - tracing/ftrace: disable preemption in syscall probe (Jerome Marchand) [RHEL-86682]
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Jerome Marchand) [RHEL-86682]
  - parisc/ftrace: Fix function graph tracing disablement (Jerome Marchand) [RHEL-86682]
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Jerome Marchand) [RHEL-86682]
  - tracing: Fix function timing profiler to initialize hashtable (Jerome Marchand) [RHEL-86682]
  - bonding: check xdp prog when set bond mode (Hangbin Liu) [RHEL-96600]
  - wireguard: netlink: use NLA_POLICY_MASK where possible (CKI Backport Bot) [RHEL-96621]
  - wireguard: global: add __nonstring annotations for unterminated strings (CKI Backport Bot) [RHEL-96621]
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (CKI Backport Bot) [RHEL-96603]
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (CKI Backport Bot) [RHEL-96603]
  - s390/uv: Improve splitting of large folios that cannot be split while dirty (Thomas Huth) [RHEL-58218]
  - s390/uv: Always return 0 from s390_wiggle_split_folio() if successful (Thomas Huth) [RHEL-58218]
  - s390/uv: Don't return 0 from make_hva_secure() if the operation was not successful (Thomas Huth) [RHEL-58218]
  - KVM: s390: pv: fix race when making a page secure (Thomas Huth) [RHEL-58218]
  - KVM: s390: remove the last user of page->index (Thomas Huth) [RHEL-92226]
  - KVM: s390: move PGSTE softbits (Thomas Huth) [RHEL-92226]
  - KVM: s390: remove useless page->index usage (Thomas Huth) [RHEL-92226]
  - KVM: s390: move gmap_shadow_pgt_lookup() into kvm (Thomas Huth) [RHEL-92226]
  - KVM: s390: stop using lists to keep track of used dat tables (Thomas Huth) [RHEL-92226]
  - KVM: s390: stop using page->index for non-shadow gmaps (Thomas Huth) [RHEL-92226]
  - KVM: s390: move some gmap shadowing functions away from mm/gmap.c (Thomas Huth) [RHEL-92226]
  - KVM: s390: get rid of gmap_translate() (Thomas Huth) [RHEL-92226]
  - KVM: s390: get rid of gmap_fault() (Thomas Huth) [RHEL-92226]
  - KVM: s390: use __kvm_faultin_pfn() (Thomas Huth) [RHEL-92226]
  - KVM: s390: move pv gmap functions into kvm (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: fix ucontrol memory region test (Thomas Huth) [RHEL-92226]
  - KVM: s390: fake memslot for ucontrol VMs (Thomas Huth) [RHEL-92226]
  - KVM: s390: wrapper for KVM_BUG (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: correct IP.b length in uc_handle_sieic debug output (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: Fix whitespace confusion in ucontrol test (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: Verify reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: Streamline uc_skey test to issue iske after sske (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: Add uc_skey VM test case (Thomas Huth) [RHEL-92226]
  - KVM: s390: selftests: Add uc_map_unmap VM test case (Thomas Huth) [RHEL-92226]
  - Revert "wifi: mwifiex: Fix HT40 bandwidth issue." (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - Revert "wifi: mt76: Check link_conf pointer in mt76_connac_mcu_sta_basic_tlv()" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: prevent uninit return in mt7996_mac_sta_add_links (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: scan: Fix 'mlink' dereferenced before IS_ERR_OR_NULL check (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: Fix logical vs bitwise typo (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fix memory corruption during MLO multicast tx (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: fix missing hdr_trans_tlv command for broadcast wtbl (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: disable napi on driver removal (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add support for Killer on MTL (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-37973}
  - wifi: iwlwifi: restore missing initialization of async_handlers_list (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-37990}
  - wifi: iwlwifi: fix the check for the SCRATCH register upon resume (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: don't warn if the NIC is gone in resume (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix BAID validity check (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: back off on continuous errors (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: only create debugfs symlink if it does not exist (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: inform trans on init failure (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: properly handle async notification in op mode start (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - Revert "wifi: iwlwifi: make no_160 more generic" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - Revert "wifi: iwlwifi: add support for BE213" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: restore monitor for outgoing frames (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - gcc-15: work around sequence-point warning (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: Restart firmware on iwl_mld_no_wowlan_resume() error (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: pcie: set state to no-FW before reset handshake (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: brcmfmac: fix memory leak in brcmf_get_module_param (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: silence uninitialized variable warning (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-37794}
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - iwlwifi: mld: fix building with CONFIG_PM_SLEEP disabled (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix PM_SLEEP -Wundef warning (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: reduce scope for uninitialized variable (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: fix locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Update mt7996_tx to MLO support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_ampdu_action to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework set/get_tsf callabcks to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: set vif default link_id adding/removing vif links (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_mcu_beacon_inband_discov to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_mcu_add_obss_spr to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_net_fill_forward_path to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_update_mu_group to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_mac_sta_poll to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_mac_sta_rc_work to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: remove mt7996_mac_enable_rtscts() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_sta_hw_queue_read to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_set_hw_key to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_sta_link to mt7996_mcu_add_bss_info signature (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_sta_set_4addr and mt7996_sta_set_decap_offload to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_rx_get_wcid to support MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Rely on wcid_to_sta in mt7996_mac_add_txs_skb() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: rework mt7996_mac_write_txwi() for MLO support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_mcu_teardown_mld_sta rouine (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_mcu_sta_mld_setup_tlv() and mt7996_mcu_sta_eht_mld_tlv() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Update mt7996_mcu_add_rate_ctrl to MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Rely on mt7996_vif/sta_link in twt teardown (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Rely on mt7996_vif_link in mt7996_mcu_twt_agrt_update signature (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Update mt7996_mcu_add_sta to MLO support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: Check link_conf pointer in mt76_connac_mcu_sta_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Support MLO in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_mac_sta_change_links callback (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Rely on mt7996_sta_link in sta_add/sta_remove callbacks (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_sta_state routine (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add link_info_changed callback (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add vif_cfg_changed callback (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add mt7996_sta_link struct in mt7996_vif_link (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Introduce mt7996_sta_link container (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: Add change_vif_links stub (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: scan: fix setting tx_info fields (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: implement driver specific get_txpower function (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: use the correct vif link for scanning/roc (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: scan: set vif offchannel link for scanning/roc (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: remove unnecessary key->cipher check for BIP frames (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: fix SER reset trigger on WED reset (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: revise TXS size (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7996: cleanup mt7996_get_power_bound (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7915: cleanup mt7915_get_power_bound (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: add mt76_get_power_bound helper function (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: add MTCL support to enhance the regulatory compliance (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt792x: extend MTCL of APCI to version3 for EHT control (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: remove unused acpi function for clc (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: update the channel usage when the regd domain changed (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: add EHT control support based on the CLC data (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: load the appropriate CLC data based on hardware type (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: update the power-saving flow (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-22032}
  - wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: Remove unnecessary if-check (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: Add check for devm_kstrdup() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: fix country count limitation for CLC (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: ensure wow pattern command align fw format (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7915: fix possible integer overflows in mt7915_muru_stats_show() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: fix fails to enter low power mode in suspend state (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mt76: mt7925: introduce MLO capability control (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: nl80211: re-enable multi-link reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: dvm: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: do not use iwlmld for non-wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove a buggy else statement in op_mode selection (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Fix RF calibration data download from file (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Fix premature release of RF calibration data. (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-22119}
  - wifi: mac80211: check basic rates validity in sta_link_apply_parameters (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix indentation in ieee80211_set_monitor_channel() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Fix HT40 bandwidth issue. (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: add debugfs to control MLO scan (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: we support v6 of compressed_ba_notif (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: iwl_mld_remove_link can't fail (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix copy/paste error (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: make iwl_mld_run_fw_init_sequence static (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: KUnit: test iwl_mld_channel_load_allows_emlsr (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: KUnit: create chanctx with a custom width (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: KUnit: introduce iwl_mld_kunit_link (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: allow EMLSR for unequal bandwidth (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: prevent toggling EMLSR due to FW requests (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: remove IWL_MLD_EMLSR_BLOCKED_FW (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: add support for DHC_TOOLS_UMAC_GET_TAS_STATUS command (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: Ensure wiphy lock is held during debugfs read operations (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: Add support for WIPHY_DEBUGFS_READ_FILE_OPS_MLD macro (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: Rename WIPHY_DEBUGFS_HANDLER_WRAPPER to WIPHY_DEBUGFS_WRITE_HANDLER_WRAPPER (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: nl80211: store chandef on the correct link when starting CAC (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add __nonstring annotations for unterminated strings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Enable the new RTL8814AE/RTL8814AU drivers (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add rtw8814au.c (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add rtw8814ae.c (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add rtw8814a.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add rtw8814a_table.c (part 2/2) (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add rtw8814a_table.c (part 1/2) (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add some definitions for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Update Wi-Fi/Bluetooth coexistence version to 7.0.4 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Add parser for Bluetooth channel map report version 7 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Fix coexistence report not show as expected (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: RTL8852BT coexistence Wi-Fi firmware support for 0.29.122.0 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: set force HE TB mode when connecting to 11ax AP (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: 8922a: enable dynamic antenna gain (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: enable dynamic antenna gain based on country (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: refine mechanism of TAS (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: add support for negative values of dBm to linear conversion (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Fix uninitialized variable with __free() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: use cfg80211_chandef_get_width() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: expose cfg80211_chandef_get_width() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: use supported selectors from assoc in ML reconf (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: remove SSID from ML reconf (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: zd1211rw: Add __nonstring annotations for unterminated strings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: virt_wifi: Add __nonstring annotations for unterminated strings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Add __nonstring annotations for unterminated strings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: avoid selecting bad links (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix bad RSSI handling (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: always do MLO scan before link selection (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: Correctly configure the A-MSDU max lengths (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: remove AP keys only for AP STA (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: move the ftm initiator data to ftm-initiator.h (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: enable OMI bandwidth reduction on 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix OMI time protection logic (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: use the right iface iterator in low_latency (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: initialize regulatory early (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: assume wiphy is locked when getting BSS ifaces (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: refactor iwl_mld_valid_emlsr_pair (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: track channel_load_not_by_us (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix SMPS W/A (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: fix build with CONFIG_PM_SLEEP undefined (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: fix setting the TK when associated (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: don't warn when if there is a FW error (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: bump minimum API version in BZ/SC to 93 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: bump FW API to 98 for BZ/SC/DR devices (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: Fix bit size calculation in iwl_dbgfs_tas_get_status_read (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: w/a FW SMPS mode selection (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: fix debug actions order (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mark Br device not integrated (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Add new TAS disable reason for invalid table source (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: cleanup of TAS structure and enums (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: fix print for ECKV (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: fix the ECKV UEFI variable name (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add support for BE213 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: set WMM in ML reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: don't include MLE in ML reconf per-STA profile (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix ML reconf reset in disconnect (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Notify cfg80211 about added link addresses (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: Update the link address when a link is added (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix warning on disconnect during failed ML reconf (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix userspace_selectors corruption (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211_hwsim: Fix MLD address translation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: allow 320 MHz FTM measurements (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: improve supported_selector documentation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix U-APSD check in ML reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: allow IR in 20 MHz configurations (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: mlme: support extended MLD capa/ops in assoc (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: allow setting extended MLD capa/ops (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: move link reconfig parameters into a struct (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: pci: correct ISR RDU bit for 8922AE (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: don't reject firmware in blacklist to prevent breaking users (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: correct debug message format in rtw89_build_txpwr_trk_tbl_from_elm() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: update role_maintain H2C command for roles operating on band 1 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: use struct to fill role_maintain H2C command (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add iwlmld sub-driver (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove mld/roc.c (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Report proper tx completion status to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - dt-bindings: wireless: ath12k: Strip ath12k prefix from calibration property (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - dt-bindings: wireless: ath11k: Strip ath11k prefix from calibration property (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - dt-bindings: net: ath11k: document the inputs of the ath11k on WCN6855 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: Deprecate qcom,ath11k-calibration-variant properties (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - dt-bindings: wireless: ath10k: Strip ath10k prefix from calibration properties (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath10k: Deprecate qcom,ath10k-calibration-variant properties (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: pass BSSID index as input for EMA (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: pass tx arvif for MBSSID and EMA beacon generation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: refactor transmitted arvif retrieval (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: pass tx arvif for MBSSID and EMA beacon generation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: refactor transmitted arvif retrieval (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: refactor populating mesh related fields in sinfo (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: reorg sinfo structure elements for mesh (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Fix spelling mistake "Increate" -> "Increase" (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k/ath12k: Replace irq_set_affinity_hint() with irq_set_affinity_and_hint() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-22128}
  - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-23129}
  - wifi: rtw89: Parse channel from IE to correct invalid hardware reports during scanning (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: add support for HW TKIP crypto (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add Debug Host Command APIs (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add IWL_MAX_NUM_IGTKS macro (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add OMI bandwidth reduction APIs (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove mvm prefix from iwl_mvm_d3_end_notif (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remember if the UATS table was read successfully (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: export iwl_get_lari_config_bitmap (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add support for external 32 KHz clock (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: add a debug level for EHT prints (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mld: add a debug level for PTP prints (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove mvm prefix from iwl_mvm_esr_mode_notif (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: use 0xff instead of 0xffffffff for invalid (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: location api cleanup (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: expose update timestamp to drivers (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: add ieee80211_iter_chan_contexts_mtx (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Fix possible integer promotion issue (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: convert timeouts to secs_to_jiffies() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Add counter for all monitor interfaces (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add NULL check to validate tpc_stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: use link specific bss_conf as well in ath12k_mac_vif_cache_flush() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend rtw_debugfs_get_tx_pwr_tbl() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend rtw_debugfs_get_phy_info() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend rtw_phy_config_swing_table() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_rx_phy_stat() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_mac_power_switch() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: safely cast mfw_hdr pointer from firmware->data (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: add debug message for unexpected secure firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: add H2C command of TX time for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: mac: define registers of agg_limit and txcnt_limit to share common flow (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: rtw8852b{t}: fix TSSI debug timestamps (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add missing htt_metadata flag in ath12k_dp_tx() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: remove redundant declaration of ath12k_dp_rx_h_find_peer() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: cleanup ath12k_mac_mlo_ready() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: Add firmware coredump collection support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: use union for vaddr and iaddr in target_mem_chunk (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Support Received FSE Stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Support Uplink MUMIMO Trigger Stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Support Uplink OFDMA Trigger Stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Support Latency Stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Support Sounding Stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Enable MLO for single split-phy PCI device (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Remove dependency on single_chip_mlo_support for mlo_capable flag (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Enable MLO setup ready and teardown commands for single split-phy device (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fix locking in "QMI firmware ready" error paths (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add support for MLO Multicast handling in driver (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Update HTT_TCL_METADATA version and bit mask definitions (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2024-58096}
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2024-58097}
  - wifi: ath12k: handle link removal in change_vif_links() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: allocate new links in change_vif_links() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: relocate a few functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: use arvif instead of link_conf in ath12k_mac_set_key() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: remove redundant logic for initializing arvif (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: remove redundant vif settings during link interface creation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: introduce ath12k_generic_dbg() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: eliminate redundant debug mask check in ath12k_dbg() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add peer extended Rx statistics debugfs support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Refactor the format of peer rate table information (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add EHT MCS support in Extended Rx statistics (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Update the peer id in PPDU end user stats TLV (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add HAL_PHYRX_OTHER_RECEIVE_INFO TLV parsing support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add HAL_RX_PPDU_START_USER_INFO TLV parsing support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add HAL_PHYRX_GENERIC_EHT_SIG TLV parsing support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add HAL_PHYRX_GENERIC_U_SIG TLV parsing support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: add support of station average signal strength (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: implement dump region split (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: add twt operation cmd (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: use correct IMR dump variable (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: support ROC version 6 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: clarify the meaning of IWL_INIT_PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: properly set the names for SC devices (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: make no_160 more generic (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: be less aggressive with re-probe (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: fw: make iwl_send_dbg_dump_complete_cmd() static (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: Indicate support link reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Indicate support for EPCS (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: cfg: separate 22000/BZ family HT params (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: enable 320 MHz on slow PCIe links (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: don't warn during reprobe (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Unify TAS block list handling in regulatory.c (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: rename and move iwl_mvm_eval_dsm_rfi() to iwl_rfi_is_enabled_in_bios() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: rework the Tx of the deauth in ieee80211_set_disassoc() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: ensure sdata->work is canceled before initialized. (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: enable removing assoc link (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: aggregation: remove deflink accesses for MLO (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: always send max agg subframe num in strict mode (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: tests: add tests for ieee80211_determine_chan_mode (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: add HT and VHT basic set verification (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211_hwsim: enable strict mode (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: add strict mode disabling workarounds (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Add processing of TTLM teardown frame (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ieee80211: Add missing EHT MAC capabilities (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Add support for EPCS configuration (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Refactor ieee80211_sta_wmm_params() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: cfg80211: Fix trace print for removed links (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mac80211: Drop cooked monitor support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: nl80211/cfg80211: Stop supporting cooked monitor (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Remove unused mwifiex_uap_del_sta_data (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove the mvm prefix from iwl_mvm_aux_sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove the version number from iwl_dts_measurement_notif_v2 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: remove the mvm prefix from iwl_mvm_ctdp_cmd (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - dt-bindings: net: rfkill-gpio: enable booting in blocked state (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - net: rfkill: gpio: allow booting in blocked state (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Remove old device data (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: Remove unused iwl_bz_name (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: Remove unused iwl_mvm_ftm_add_pasn_sta (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: Remove unused iwl_mvm_ftm_*_add_pasn_sta functions (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: mvm: Remove unused iwl_mvm_rx_missed_vap_notif (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: iwlwifi: dvm: Remove unused iwl_rx_ant_restriction (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: debugfs depends on CFG80211's one (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtlwifi: rtl8192de: Fix typos of debug message of phy setting (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix rtw_update_sta_info() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend TX power stuff for 3-4 spatial streams (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Rename RTW_RATE_SECTION_MAX to RTW_RATE_SECTION_NUM (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Constify some more structs and arrays (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend rtw_fw_send_ra_info() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend rf_base_addr and rf_sipi_addr for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Extend struct rtw_pwr_track_tbl for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Fix a typo of debug message in rtw8723d_iqk_check_tx_failed() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: regd: avoid using BITMAP_FROM_U64() to assign function bitmap (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Update Wi-Fi/Bluetooth coexistence version to 7.0.3 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: To avoid TWS serials A2DP lag, adjust slot arrangement (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: validate multi-firmware header before getting its size (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: fw: validate multi-firmware header before accessing (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: ps: update H2C command with more info for PS (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: call power_on ahead before selecting firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: update channel list in worker when wait flag is set (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: update channel list in reg notifier instead reg worker (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-23133}
  - wifi: ath12k: Add Support to Calculate and Display TPC Values (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add Support to Parse TPC Event from Firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Dump additional PDEV receive rate HTT stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Dump PDEV receive rate HTT stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Dump PDEV transmit rate HTT stats (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: fix wrong overriding for VHT Beamformee STS Capability (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: add support for MU EDCA (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add support for reading variant from ACPI to download board data file (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Adjust the timing to access ACPI table (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add Support for enabling or disabling specific features based on ACPI bitflag (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add support for obtaining the buffer type ACPI function bitmap (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: handle ath12k_mac_ieee80211_sta_bw_to_wmi() for link sta (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: relocate ath12k_mac_ieee80211_sta_bw_to_wmi() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Avoid napi_sync() before napi_enable() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: prevent CSA counter to reach 0 and hit WARN_ON_ONCE (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: update the latest CSA counter (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: fix handling of CSA offsets in beacon template command (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: update beacon template function to use arvif structure (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtl8xxxu: retry firmware download on error (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Don't use static local variable in rtw8821c_set_tx_power_index_by_rate (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtl8xxxu: Enable AP mode for RTL8192CU (RTL8188CUS) (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: pci: not assert wiphy_lock to free early_h2c for PCI probe/remove (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: remove definition of driver mutex (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: manual cosmetic along lockdep_assert_wiphy() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: remove consumers of driver mutex (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: debugfs: use debugfs_short_fops (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: debugfs: use wiphy_locked_debugfs_{read,write}() if needed (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: debugfs: specify buffer size allocated by devm_kazlloc() for reading (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: debugfs: implement file_ops::read/write to replace seq_file (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: use wiphy_work() to replace ieee802111_work() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: cleanup unused rtwdev::roc_work (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: regd: refactor init/setup flow and prototype (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: regd: handle supported regulatory functions by country (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: regd: support loading regd table from fw element (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: disable CFO track when two PHY are working simultaneously (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: support EDCCA log per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: support EDCCA per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: support ch_info per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: support DIG per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: support env_monitor per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: add PHY context array to support functions per PHY (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: phy: rename to RTW89_PHY_NUM as proper naming (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: remove return for empty tx bitrate in mac_op_sta_statistics (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: remove peer extra rssi update (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath9k: do not submit zero bytes to the entropy pool (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath9k: return by of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fetch regdb.bin file from board-2.bin (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: mwifiex: Constify struct mwifiex_if_ops (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Enable monitor ring mask for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Handle monitor drop TLVs scenario (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Avoid memory leak while enabling statistics (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-37743}
  - wifi: ath12k: Handle PPDU spread across multiple buffers (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Optimize NAPI budget by adjusting PPDU processing (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Handle end reason for the monitor destination ring (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add drop descriptor handling for monitor ring (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Restructure the code for monitor ring processing (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Avoid code duplication in monitor ring processing (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Avoid multiple times configuring monitor filter (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Enable filter config for monitor destination ring (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Add HTT source ring ID for monitor rings (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Fix pdev lookup in WBM error processing (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Request pdev stats from firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Request beacon stats from firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Request vdev stats from firmware (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: fix memory leak in ath12k_pci_remove() (Jose Ignacio Tornos Martinez) [RHEL-89169] {CVE-2025-37744}
  - wifi: ath12k: encode max Tx power in scan channel list command (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: fix memory leak in ath11k_xxx_remove() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: report station mode signal strength (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: report station mode receive rate for IEEE 802.11be (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: report station mode transmit rate (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: fix skb_ext_desc leak in ath12k_dp_tx() error path (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Disable MLO in Factory Test Mode (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: add factory test mode support (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: export ath12k_wmi_tlv_hdr for testmode (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath: create common testmode_i.h file for ath drivers (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: Correct immediate cfg_len calculation for scan_offload_be (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Update Wi-Fi/Bluetooth coexistence version to 7.0.2 (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: rtw89: coex: Add protect to avoid A2DP lag while Wi-Fi connecting (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Refactor Rx status TLV parsing procedure argument (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Refactor the monitor Tx/RX handler procedure arguments (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath12k: Refactor the monitor Rx parser handler argument (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath9k: use unsigned long for activity check timestamp (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath9k: cleanup struct ath_tx_control and ath_tx_prepare() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - wifi: ath11k: convert timeouts to secs_to_jiffies() (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-89169]
  - config: wifi: enable iwlmld driver (Jose Ignacio Tornos Martinez) [RHEL-89169]


