# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-259.el10]
changelog:
  - redhat/kernel.spec.template: Switch UKI addons back to 504 cert (Vitaly Kuznetsov) [RHEL-238666]
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235810]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224534]
  - randomize_kstack: Unify random source across arches (Mark Salter) [RHEL-215975]
  - x86/syscall/64: Move 64-bit syscall dispatch code (Mark Salter) [RHEL-215975]
  - randomize_kstack: Maintain kstack_offset per task (Mark Salter) [RHEL-215975]
  - dpll: zl3073x: add NCO virtual input pin (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: add per-DPLL serialization lock (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: use per-operation poll timeouts (CKI Backport Bot) [RHEL-176048]
  - dpll: add DPLL_PIN_TYPE_INT_NCO pin type (CKI Backport Bot) [RHEL-176048]
  - dpll: add STATE_CONNECTED_OVERRIDE pin capability (CKI Backport Bot) [RHEL-176048]
  - netfilter: nft_payload: fix mask build for partial field offload (Florian Westphal) [RHEL-185609]
  - ipvs: clear the nfct flag under lock (Florian Westphal) [RHEL-185609]
  - ipvs: do not mangle ICMP replies for non-first fragments (Florian Westphal) [RHEL-185609]
  - ipvs: fix places with wrong packet offsets (Florian Westphal) [RHEL-185609]
  - ipvs: fix the checksum validations (Florian Westphal) [RHEL-185609]
  - netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: make nft_object rhltable per table (Florian Westphal) [RHEL-185609]
  - ipvs: do not propagate one-packet flag to synced conns (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: do not update comments from kernel-side hash adds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_physdev: masks are not c-strings (Florian Westphal) [RHEL-185609]
  - ipvs: fix more places with wrong ipv6 transport offsets (Florian Westphal) [RHEL-185609]
  - ipvs: reload ip header after head reallocation (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use correct direction to set up tunnel route (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: fix zone comparison in tuple dedup (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (Florian Westphal) [RHEL-185609] {CVE-2026-64554}
  - netfilter: ecache: fix inverted time_after() check (Florian Westphal) [RHEL-185609]
  - netfilter: xt_nat: reject unsupported target families (Florian Westphal) [RHEL-185609]
  - ipvs: ensure inner headers in ICMP errors are in headroom (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in SCTP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in TCP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: pass parsed transport offset to state handlers (Florian Westphal) [RHEL-185609]
  - netfilter: handle unreadable frags (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: support IPIP tunnel with direct xmit (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: IPIP tunnel hardware offload is not yet support (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use dst in this direction when pushing IPIP header (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: allocate the proper memory for the generic hash structure (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: cleanup the add/del backlog when resize failed (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: exclude gc when resize is in progress (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: mark the rcu locked areas properly (Florian Westphal) [RHEL-185609]
  - netfilter: nft_lookup: fix catchall element handling with inverted lookups (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: module names must be null-terminated (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: zero chainstack array (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: terminate table name before find_table_lock() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (Florian Westphal) [RHEL-185609]
  - netfilter: xt_connmark: reject invalid shift parameters (Florian Westphal) [RHEL-185609]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-185609]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: get command skips end element with open interval (Florian Westphal) [RHEL-185609]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates (Florian Westphal) [RHEL-185609]
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_u32: reject invalid shift counts (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict checkum update offset (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict linklayer and network header writes (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_queue: restrict writes to network header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration (Florian Westphal) [RHEL-185609]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: add deprecation warnings for irc and pptp trackers (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-185609]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test (Florian Westphal) [RHEL-185609]
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot (Florian Westphal) [RHEL-185609]
  - netfilter: x_tables.h: fix all kernel-doc warnings (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: use conntrack GC to reap expectations (Florian Westphal) [RHEL-185609]
  - netfilter: nf_reject: skip iphdr options when looking for icmp header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-185609]
  - netfilter: nft_payload: reject offsets exceeding 65535 bytes (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix and simplify IP6IP6 tunnel handling (Florian Westphal) [RHEL-185609]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-185609]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix offloaded ct timeout never being extended (Florian Westphal) [RHEL-185609]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: bail out if forward path cannot be discovered (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register (Florian Westphal) [RHEL-185609] {CVE-2026-53211}
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185609] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185609] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185609] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-185609] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-185609]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185609] {CVE-2026-53220}
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: revert ct extension genid infrastructure (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: add refcounting from datapath (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper (Florian Westphal) [RHEL-185609]
  - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-185609]
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: make ebt_snat ARP rewrite writable (Florian Westphal) [RHEL-185609] {CVE-2026-53266}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185609] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185609] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185609] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185609] {CVE-2026-53269}
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-185609] {CVE-2026-53270}
  - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_ftp: avoid u16 overflows (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo_avx2: restore performance optimization (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_proto_tcp: fix typos in comments (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-185609]
  - netfilter: nfnl_cthelper: apply per-class values when updating policies (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: remove dead conditional (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-185609]
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185609]
  - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() (Mark Salter) [RHEL-184786]
  - arm64/mm: Reject memory removal that splits a kernel leaf mapping (Mark Salter) [RHEL-184786]
  - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Mark Salter) [RHEL-184786]
  - devlink: Fix parent ref leak in devl_rate_node_create() (Petr Oros) [RHEL-179081]
  - devlink: Fix parent ref leak on tc-bw failure (Petr Oros) [RHEL-179081]
  - netdevsim: Add devlink port resource registration (Petr Oros) [RHEL-179081]
  - netdevsim: register a new devlink param with default value interface (Petr Oros) [RHEL-179081]
  - docs: net: fix minor issues with devlink docs (Petr Oros) [RHEL-179081]
  - devlink: Warn on resource ID collision with PARENT_TOP (Petr Oros) [RHEL-179081]
  - devlink: Implement devlink param multi attribute nested data values (Petr Oros) [RHEL-179081]
  - devlink: heap-allocate param fill buffers in devlink_nl_param_fill (Petr Oros) [RHEL-179081]
  - devlink: Release nested relation on devlink free (Petr Oros) [RHEL-179081] {CVE-2026-53261}
  - devlink: pass param values by pointer (Petr Oros) [RHEL-179081]
  - devlink: Document resource scope filtering (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add resource dump and scope filter test (Petr Oros) [RHEL-179081]
  - devlink: Add resource scope filtering to resource dump (Petr Oros) [RHEL-179081]
  - devlink: Document port-level resources and full dump (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add devlink port resource doit test (Petr Oros) [RHEL-179081]
  - devlink: Add port-specific option to resource dump doit (Petr Oros) [RHEL-179081]
  - devlink: Include port resources in resource dump dumpit (Petr Oros) [RHEL-179081]
  - devlink: Add dump support for device-level resources (Petr Oros) [RHEL-179081]
  - devlink: Add port-level resource registration infrastructure (Petr Oros) [RHEL-179081]
  - devlink: Refactor resource functions to be generic (Petr Oros) [RHEL-179081]
  - devlink: Fix incorrect skb socket family dumping (Petr Oros) [RHEL-179081]
  - documentation: networking: add shared devlink documentation (Petr Oros) [RHEL-179081]
  - devlink: introduce shared devlink instance for PFs on same chip (Petr Oros) [RHEL-179081]
  - devlink: allow devlink instance allocation without a backing device (Petr Oros) [RHEL-179081]
  - devlink: add devl_warn() helper and use it in port warnings (Petr Oros) [RHEL-179081]
  - devlink: add devlink_dev_driver_name() helper and use it in trace events (Petr Oros) [RHEL-179081]
  - devlink: introduce __devlink_alloc() with dev driver pointer (Petr Oros) [RHEL-179081]
  - devlink: support index-based notification filtering (Petr Oros) [RHEL-179081]
  - devlink: support index-based lookup via bus_name/dev_name handle (Petr Oros) [RHEL-179081]
  - devlink: allow to use devlink index as a command handle (Petr Oros) [RHEL-179081]
  - devlink: avoid extra iterations when found devlink is not registered (Petr Oros) [RHEL-179081]
  - devlink: add helpers to get bus_name/dev_name (Petr Oros) [RHEL-179081]
  - devlink: expose devlink instance index over netlink (Petr Oros) [RHEL-179081]
  - devlink: Refactor devlink_rate_nodes_check (Petr Oros) [RHEL-179081]
  - devlink: Reverse locking order for nested instances (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix tolerance calculation in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix and clarify TC bandwidth split in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Set shell=True for sysfs writes in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Use Iperf3Runner in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: test devlink default params (Petr Oros) [RHEL-179081]
  - devlink: support default values for param-get and param-set (Petr Oros) [RHEL-179081]
  - devlink: refactor devlink_nl_param_value_fill_one() (Petr Oros) [RHEL-179081]
  - devlink: pass extack through to devlink_param::get() (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_usb driver (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_pciefd driver (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Make command requirements explicit (Petr Oros) [RHEL-179081]
  - i2c: designware: Add ACPI HID for DWAPB I2C controller on FUJITSU-MONAKA (Mark Salter) [RHEL-23132]
  - gpio: dwapb: Add ACPI HID for DWAPB GPIO controller on Fujitsu MONAKA (Mark Salter) [RHEL-23123]
  - new configs in net drivers (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: nxp,s32-dwmac: Use the GPR syscon (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use a syscon for S32_PHY_INTF_SEL_RGMII (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix PTP ref clock for Tegra234 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: pcs: renesas,rzn1-miic: Add RZ/T2H and RZ/N2H support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128151]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128151]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for controlling PCS interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink PCS support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: lynx: support phy-mode = "10g-qxgmii" (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128151]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: Add snps,dwmac-5.00a IP compatible string (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - dt-bindings: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: thead,th1520-gmac: Describe APB interface clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add support for Sophgo SG2044 dwmac (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Add compatible string for RK3528 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Require rockchip,grf and rockchip,php-grf (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add FSD EQoS device tree bindings (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add T-HEAD dwmac support (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: snps,dwmac: add support for Arria10 (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: rearrange register definitions (Izabela Bakollari) [RHEL-100501]
  - net: remove phylink_pcs .neg_mode boolean (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100501]
  - net: pcs: lynx: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove return statements in void function (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_config_usxgmii() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: combine xpcs_link_up_{1000basex,sgmii}() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: replace open-coded mii_bmcr_encode_fixed() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use generic register definitions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Add snps,dwmac-5.30a IP compatible string (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Group GMAC4 compatible check (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100501]
  - stmmac: dwmac-intel-plat: remove redundant dwmac->data check in probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100501]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-260.el10]
changelog:
  - x86/mce: Set up the polling timer before CMCI discovery (Steve Best) [RHEL-239086]
  - scsi: target: Fix hexadecimal CHAP_I handling (Maurizio Lombardi) [RHEL-231666] {CVE-2026-63886}
  - thermal: core: Fix thermal zone device registration error path (Steve Best) [RHEL-226828] {CVE-2026-43332}
  - perf/arm_pmu: Skip PMCCNTR_EL0 on NVIDIA Olympus (Charles Mirabile) [RHEL-176084]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-222582]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222670] {CVE-2026-53329}
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222688] {CVE-2026-53136}
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222698] {CVE-2026-53143}
  - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222746] {CVE-2026-63884}
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222752] {CVE-2026-53356}
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222574] {CVE-2026-64219}
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222626] {CVE-2026-63879}
  - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222650] {CVE-2026-53374}
  - KVM: VMX: Disable CET by default (Aidan Wallace) [RHEL-235002]
  - KVM: VMX: introduce module parameter to disable CET (Aidan Wallace) [RHEL-235002]
  - perf/arm-cmn: Support CMN S3 r2 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Plumb in new filter types (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter data (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter programming (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Rename filter variables for clarity (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Add workarounds for CMN-S3 on Graviton5 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Move DTM index data out of hw_perf_event (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Stop claiming entire iomem region (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix DVM node events (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Reject unsupported hardware configurations (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Support CMN-600AE (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Permit more exhaustive groups (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Jeremy Linton) [RHEL-234652]
  - perf trace: Refactor augmented_raw_syscalls using bpf_for (Trevor Allison) [RHEL-183355]
  - perf trace: Factor out BPF loop body (Trevor Allison) [RHEL-183355]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193253]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193253]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rt5575: Use __le32 for SPI burst write address (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193253]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193253]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193253]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193253]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193253]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193253]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193253]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193253]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193253]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193253]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8189: Fix probe resource cleanup (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193253]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193253] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193253]
  - HID: uhid: convert to hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() (Benjamin Tissoires) [RHEL-170872]
  - HID: Input: Add battery list cleanup with devm action (Benjamin Tissoires) [RHEL-170872]
  - Input: add ABS_SND_PROFILE (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: drop dead NULL check on to_usb_interface() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: reject non-USB transports in probe (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Fix buffer over-read and unaligned access in X12 Tab raw_event handler (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: remove duplicate hid_warn_ratelimited definition (Benjamin Tissoires) [RHEL-170872]
  - HID: u2fzero: free allocated URB on probe errors (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Fix size_t specifier in hid_report_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Add support for newer Bluetooth keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix integer overflow in pidff_rescale (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: add reset quirk for BLTP7853 touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: core: introduce hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires) [RHEL-170872]
  - HID: google: hammer: stop hardware on devres action failure (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: run inactivity autodim from workqueues (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46202}
  - HID: appletb-kbd: fix UAF in inactivity-timer cleanup path (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46213}
  - HID: playstation: Clamp num_touch_reports (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46232}
  - HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: fix OOB write in mcp2221_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: really enable the intended work around for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sjoy: race between init and usage (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Fix regression of input name assignment (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Fix some error codes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: restore OS_TYPE after resume from s2idle (Benjamin Tissoires) [RHEL-170872]
  - HID: elan: Add support for ELAN SB974D touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for Rock Band 3 Pro instruments (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for SMK-Link remotes (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: remove unneeded WARN_ON() in sony_leds_init() (Benjamin Tissoires) [RHEL-170872]
  - HID: ft260: validate i2c input report length (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix incorrect force-feedback check in sony_suspend() (Benjamin Tissoires) [RHEL-170872]
  - HID: core: clamp report_size in s32ton() to avoid undefined shift (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31624}
  - HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Enable rumble effects (Benjamin Tissoires) [RHEL-170872]
  - HID: core: do not allow parsing 0-sized reports (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: refactor endpoint lookup (Benjamin Tissoires) [RHEL-170872]
  - HID: huawei: fix CD30 keyboard report descriptor issue (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: validate num_touch_reports in DualShock 4 reports (Benjamin Tissoires) [RHEL-170872]
  - HID: drop 'default !EXPERT' from tristate symbols (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: fix deadlock in hid_post_reset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-53037}
  - HID: apple: ensure the keyboard backlight is off if suspending (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (Benjamin Tissoires) [RHEL-170872]
  - HID: alps: fix NULL pointer dereference in alps_raw_event() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31625}
  - HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Standardise hid_report_enum variable nomenclature (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: update module description (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check bounds when deleting force-feedback effects (Benjamin Tissoires) [RHEL-170872]
  - Docs: hid: intel-ish-hid: make long URL usable (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: sony: add battery status support for Rock Band 4 PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix style issues (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: update hid-sony supported devices (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for more instruments (Benjamin Tissoires) [RHEL-170872]
  - bpf: Add fix for Trust Philips SPK6327 (145f:024b) modifier keys (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Huion KeyDial K20 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add a BPF to get the touchpad type (Benjamin Tissoires) [RHEL-170872]
  - hid: bpf: hid_bpf_helpers: add helper for having read/write udev properties (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: handle injected report descriptor in HID-BPF (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add helper macros for LE/BE conversion (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: hid_bpf_helpers: provide a cleanup functions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix some signed vs unsigned compiler warnings (Benjamin Tissoires) [RHEL-170872]
  - Input: add keycodes for contextual AI usages (HUTRR119) (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-thc: Add more frequency support for SPI (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Improve power management for touch devices (Benjamin Tissoires) [RHEL-170872]
  - HID: core: use __free(kfree) and __free(kvfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_parse_collections() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: fix LEDS dependencies (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add support for multiple batteries per device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Introduce struct hid_battery and refactor battery code (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Convert battery code to devm_* (Benjamin Tissoires) [RHEL-170872]
  - HID: input: use __free(kfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Fix spelling mistake "Enfore" -> "Enforce" (Benjamin Tissoires) [RHEL-170872]
  - HID: pl: eliminate private debug macro (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Add module parameter to enfoce GPIO mode (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Fix spelling mistake "configuratiion" -> "configuration" (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add IMU and Touchpad RO Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Touchpad Mode Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add MCU ID Attribute (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Lenovo Legion Go S Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: Include firmware version in the uevent (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add OS Mode Toggle (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Calibration Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add FPS Mode DPI settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Rumble and Haptic Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Lenovo Legion Go Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: use mcp_i2c_smbus_read for block reads (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: elan: Add parade-tc3408 timing (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_DEADBAND quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_SATURATION quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_COEFFICIENT quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Refactor field quirks detection (Benjamin Tissoires) [RHEL-170872]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Benjamin Tissoires) [RHEL-170872]
  - HID: Kysona: Add support for VXE Dragonfly R1 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: roccat: fix use-after-free in roccat_report_event (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43111}
  - HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Check to ensure report responses match the request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43047}
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43049}
  - HID: bpf: prevent buffer overflow in hid_hw_request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31401}
  - selftests/hid: fix compilation when bpf_wq and hid_device are not exported (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Mitigate potential OOB by removing bogus memset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43048}
  - HID: intel-thc-hid: Set HID_PHYS with PCI BDF (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: add .resume method in PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Enable MX Master 4 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Drop Asus UX550* touchscreen ignore battery quirks (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: cancel last I2C command on read error (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Keep latency normal on deactivate for reactivation gesture (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - selftests: hid: tests: test_wacom_generic: add tests for display devices and opaque devices (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: new class MT_CLS_EGALAX_P80H84 (Benjamin Tissoires) [RHEL-170872]
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Benjamin Tissoires) [RHEL-170872]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses (Benjamin Tissoires) [RHEL-170872]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Benjamin Tissoires) [RHEL-170872]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix condition effect bit clearing (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23349}
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Benjamin Tissoires) [RHEL-170872]
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23382}
  - HID: asus: avoid memory leak in asus_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31524}
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31522}
  - HID: apple: avoid memory leak in apple_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31520}
  - HID: Document memory allocation properties of report_fixup() (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add dongle device IDs for CRKD Gibson SG (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register fields updating (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Benjamin Tissoires) [RHEL-170872 RHEL-183865] {CVE-2026-45877}
  - HID: logitech-hidpp: Add support for Logitech K980 (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Differentiate "invalid device index" error (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sensor-hub: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: picolcd_core: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add eGalaxTouch EXC3188 support (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Add FocalTech FT8112 (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for bluetooth Rock Band 4 PS4 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43136}
  - HID: prodikeys: Check presence of pm->input_ep82 (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43251}
  - HID: magicmouse: Do not crash on missing msc->input (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43140}
  - HID: sony: add support for Rock Band 4 PS4 and PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-pl: handle probe errors (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43152}
  - HID: pidff: Do not set out of range trigger button (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add quirks for Lenovo Yoga Book 9i (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add missing check for input_ff_create_memless (Benjamin Tissoires) [RHEL-170872] {CVE-2026-45969}
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: rapoo: Add support for side buttons on RAPOO 0x2015 mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech: add HID++ support for Logitech MX Anywhere 3S (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Filter spurious HID vendor codes on ROG laptops (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Replace magic number with HID_UP_ASUSVENDOR constant (Benjamin Tissoires) [RHEL-170872]
  - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: work around VID/PID conflict for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-quicki2c: Add power management for touch device (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add output report support (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Support writing output report format (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use put_unaligned_le16 for __le16 writes (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use size_t for all length variables (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23178}
  - selftests/hid: add a test for the Digitizer/Button Type pressurepad (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: use a enum class for the different button types (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: require hidtools 0.12 (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: set INPUT_PROP_PRESSUREPAD based on Digitizer/Button Type (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23196}
  - hid: intel-thc-hid: Select SGL_ALLOC (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: fix bpf compilations due to -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix bpf compilation with -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: drop dead NULL checks in kfuncs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register reading (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Center initial joystick axes to prevent spurious events (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires) [RHEL-170872]
  - drivers: hid: renegotiate resolution multipliers with device after reset (Benjamin Tissoires) [RHEL-170872]
  - HID: evision: Fix Report Descriptor for Evision Wireless Receiver 320f:226f (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Fix probe failure when used with KVM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Remove duplicate error logging (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for G Pro X Superlight 2 receiver (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid-tablet: add ABS_DISTANCE test for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix typo in HID usage table (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add the Huion Kamvas 27 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add heuristics to the Huion Inspiroy 2S eraser button (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for XP-Pen Deco02 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the XP-Pen Deco 01 V3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Waltop Batteryless Tablet (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add fixup for Logitech SpaceNavigator variants (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: support for Huion Kamvas 16 Gen 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add support for Huion Kamvas 13 (Gen 3) (model GS1333) (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Inspiroy 2M (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix needs_playback check (Benjamin Tissoires) [RHEL-170872]
  - HID: corsair-void: Use %pe for printing PTR_ERR (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Improve Orion2 throttle support (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Format DataByte* subsection headings (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Fix packet format section headings (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: add WQ_PERCPU to alloc_workqueue users (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Reduce JC_SUBCMD_RATE_MAX_ATTEMPTS (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-input: Extend Elan ignore battery quirk to USB (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: Stop sensor before starting (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Remove redundant pm_runtime_mark_last_busy() calls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: add tests for missing release on the Dell Synaptics (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-debug: Fix spelling mistake "Rechargable" -> "Rechargeable" (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Fix build error from CONFIG_HID_HAPTIC (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Add support for the XP-PEN Artist 24 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Rate limit IMU compensation message (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Silence protocol errors on newer lightspeed receivers (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for a new lightspeed receiver iteration (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Add hw_brightness_changed support for the G510 keyboard (Benjamin Tissoires) [RHEL-170872]
  - HID: cp2112: Add parameter validation to data length (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: Fix wrong type casting (Benjamin Tissoires) [RHEL-170872]
  - HID: lg-g15 - Add support for Logitech G13. (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Switch to scoped_guard() in {dualsense|dualshock4}_output_worker() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Silence sparse warnings for locking context imbalances (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Update SP preamp gain comment line (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced features (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Change hid_driver to use a const char* for name (Benjamin Tissoires) [RHEL-170872]
  - HID: hidraw: tighten ioctl command parsing (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: forge wrong ioctls and tests them (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: add more coverage for hidraw ioctls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: update vmtest.sh for virtme-ng (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack event reporting (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack hotplug detection (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Redefine DualSense input report status field (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Prefer kzalloc(sizeof(*buf)...) (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Document spinlock_t usage (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Fix all alignment and line length issues (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Correct spelling in comment sections (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Replace uint{32,16,8}_t with u{32,16,8} (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Simplify locking with guard() and scoped_guard() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add spaces around arithmetic operators (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Make use of bitfield macros (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add haptic multitouch support (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add hid_haptic_switch_mode (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add functions handling events (Benjamin Tissoires) [RHEL-170872]
  - HID: input: calculate resolution for pressure (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: initialize haptic device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: allow mapping of haptic output (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: introduce hid_haptic_device (Benjamin Tissoires) [RHEL-170872]
  - Input: add FF_HAPTIC effect type (Benjamin Tissoires) [RHEL-170872]
  - HID: add haptics page defines (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix possible null pointer dereference (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: rescan the device for the group after a load/unload (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_set_group() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Fix test in i2c_hid_core_register_panel_follower() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Make elan touch controllers power on after panel is enabled (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Reduce PID_EFFECT_OPERATION spam (Benjamin Tissoires) [RHEL-170872]
  - HID: universal-pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Define all cardinal directions (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove Anssi's email address from info msg (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Separate check for infinite duration (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Rework pidff_upload_effect (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Update debug messages (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add support for AXES_ENABLE field (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Simplify HID field/usage searching logic (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Better quirk assigment when searching for fields (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Treat PID_REQUIRED_REPORTS as count, not max (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Use ARRAY_SIZE macro instead of sizeof (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unneeded debug (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unhelpful pidff_set_actuators helper (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Use standard multicolor LED API (Benjamin Tissoires) [RHEL-170872]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-261.el10]
changelog:
  - mm/util: don't read __page_2 for order-1 folios in snapshot_page() (Luiz Capitulino) [RHEL-214116]
  - selftests: tls: size splice_short pipe by page size (Valentin Schneider) [RHEL-153139]
  - selftests: tls: use ASSERT_GE in test_mutliproc (Valentin Schneider) [RHEL-153139]
  - selftests: tls: add test for data loss on small pipe (Valentin Schneider) [RHEL-153139]
  - perf/aux: Fix page UAF in map_range() (Michael Petlan) [RHEL-218473] {CVE-2026-64300}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - perf build-id: Fix off-by-one bug when printing kernel/module build-id (Marek Pazur) [RHEL-122642]
  - arm_mpam: guard MBWU state before adding it to garbage (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix MPAMCFG_MBW_PBM register setting (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix software reset values of MPAMCFG_PRI (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix use-after-free during unmount (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (Jeremy Linton) [RHEL-218644]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Update architecture version check for MPAM MSC (Jeremy Linton) [RHEL-218644]
  - arm64: cpufeature: Add support for the MPAM v0.1 architecture version (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Check whether the config array is allocated before destroying it (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix false positive assert failure during mpam_disable() (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Improve check for whether or not NRDY is hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Pretend that NRDY is always hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix monitor instance selection when checking for hardware NRDY (Jeremy Linton) [RHEL-218644]
  - arm64: dts: imx8dxl-ss-conn: delete usb3_lpcg node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8dxl-ss-conn: Disable USB3 nodes (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add RNG node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am625: Add OLDI support (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add support for AM625 OLDI IO Control (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add missed clock enet_2x_txclk for fec[1,2] (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add fsl,tuning-step for usdhc1 and usdhc2 (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8: add default clock rate for usdhc (Steve Dunnagan) [RHEL-213310]
  - crypto: iaa - fix per-node CPU counter reset in rebalance_wq_table() (Eder Zulian) [RHEL-213821]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213821]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213821]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213821]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213821]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180091] {CVE-2026-46145}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-262.el10]
changelog:
  - smb: client: Fix use-after-free in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-235460]
  - smb/client: show compress mount option (Paulo Alcantara) [RHEL-235460]
  - netfs: Fix folio_queue ENOMEM in writeback by adding a mempool (Paulo Alcantara) [RHEL-235460]
  - netfs: release readahead folios on iterator preparation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: handle single writeback rolling buffer allocation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: clear PG_private_2 on copy-to-cache append failure (Paulo Alcantara) [RHEL-235460]
  - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-235460]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235460]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235460]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-235460]
  - smb: client: free partially allocated transform folio queue (Paulo Alcantara) [RHEL-235460]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-235460]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-235460]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-235460]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-235460]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235460]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235460]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-235460]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-235460]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-235460]
  - cifs: Remove CIFSSMBSetPathInfoFB() fallback function (Paulo Alcantara) [RHEL-235460]
  - cifs: Fix and improve cifs_is_path_accessible() function (Paulo Alcantara) [RHEL-235460]
  - cifs: Show reason why autodisabling serverino support (Paulo Alcantara) [RHEL-235460]
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224341]
  - redhat/configs: automotive: disable CONFIG_MD (Jared Kangas) [RHEL-237678]
  - mm/gup: fix GUP-fast fallback for NULL-mapping order-0 folios (Rafael Aquini) [RHEL-231964]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227851] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227851] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227851]
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227851]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227851]
  - drm/xe: gate observation streams with perf_allow_cpu() (Michael Petlan) [RHEL-212122]
  - perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Michael Petlan) [RHEL-212122]
  - memfd: deny writeable mappings when implying SEAL_WRITE (CKI Backport Bot) [RHEL-228530] {CVE-2026-63952}
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191041] {CVE-2026-53195}
  - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191041] {CVE-2026-53196}
  - drm/panel: Clean up S6E3FC2X01 config dependencies (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Karol Herbst) [RHEL-180328]
  - drm/bridge: dw-hdmi-qp: Provide HDMI Vendor Specific InfoFrame (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: update used tracking kernel-doc (Karol Herbst) [RHEL-180328]
  - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (Karol Herbst) [RHEL-180328]
  - drm/ttm/tests: add a test to exercise ttm_bo_swapout (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix EAGAIN sign in pf_migration_consume() (Karol Herbst) [RHEL-180328]
  - Revert "drm/nouveau/gsp: add support for GA100" (Karol Herbst) [RHEL-180328]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix MMIO access using PF view instead of VF view during migration (Karol Herbst) [RHEL-180328]
  - drm/i915/display: enable ccs modifiers on dg2 (Karol Herbst) [RHEL-180328]
  - drm/xe/wa: Drop redundant entries for Wa_16021867713 & Wa_14019449301 (Karol Herbst) [RHEL-180328]
  - drm/xe/xe3p_xpc: Drop stale MCR steering TODO comment (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix redundant MQD iterations in GFX v12.1 (Karol Herbst) [RHEL-180328]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Karol Herbst) [RHEL-180328]
  - dma-fence: Silence sparse warning in dma_fence_describe (Karol Herbst) [RHEL-180328]
  - drm/hisilicon/hibmc: add updating link cap in DP detect() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() (Karol Herbst) [RHEL-180328]
  - Revert "drm/amdgpu: Init mcm_addr look up table" (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: fix kernel-doc warning for ras_eeprom_append() (Karol Herbst) [RHEL-180328]
  - drm/xe/xe_pagefault: Disallow writes to read-only VMAs (Karol Herbst) [RHEL-180328]
  - Revert "i915: don't use a vma that didn't match the context VM" (Karol Herbst) [RHEL-180328]
  - drm/drm_atomic: duplicate colorop states if plane color pipeline in use (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix kernel-doc warning for smu_msg_v1_send_msg() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix kernel-doc warning for amdgpu_ttm_alloc_mmio_remap_bo() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: remove gart_window_lock usage from gmc v12_1 (Karol Herbst) [RHEL-180328]
  - drm/sched: Remove racy hack from drm_sched_fini() (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Karol Herbst) [RHEL-180328]
  - drm/nouveau/gsp: add support for GA100 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Karol Herbst) [RHEL-180328]
  - drm/xe: Clear pending_disable before signaling suspend fence (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Karol Herbst) [RHEL-180328]
  - drm/xe/display: fix oops in suspend/shutdown without display (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Karol Herbst) [RHEL-180328]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Karol Herbst) [RHEL-180328]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject DMA commands with uninitialized length (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix arithmetic issues in dma_length() (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Karol Herbst) [RHEL-180328]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds checks for firmware log indices (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds check for firmware runtime memory (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Karol Herbst) [RHEL-180328]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Karol Herbst) [RHEL-180328]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Karol Herbst) [RHEL-180328]
  - drm/atomic: track individual colorop updates (Karol Herbst) [RHEL-180328]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Karol Herbst) [RHEL-180328]
  - drm/colorop: Remove read-only comments from interpolation fields (Karol Herbst) [RHEL-180328]
  - drm/virtio: Fix driver removal with disabled KMS (Karol Herbst) [RHEL-180328]
  - drm/i915/edp: Check supported link rates DPCD read (Karol Herbst) [RHEL-180328]
  - drm/hyperv: During panic do VMBus unload after frame buffer is flushed (Karol Herbst) [RHEL-180328]
  - Drivers: hv: vmbus: Provide option to skip VMBus unload on panic (Karol Herbst) [RHEL-180328]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Karol Herbst) [RHEL-180328]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Karol Herbst) [RHEL-180328]
  - drm/gem: fix race between change_handle and handle_delete (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate VMBus packet size in receive callback (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Read Intel DPCD workaround register (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Karol Herbst) [RHEL-180328]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Karol Herbst) [RHEL-180328]
  - drm/i915/aux: use polling when irqs are unavailable (Karol Herbst) [RHEL-180328]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Karol Herbst) [RHEL-180328]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Karol Herbst) [RHEL-180328]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix CFI failure in debugfs access (Karol Herbst) [RHEL-180328]
  - drm/xe/vf: Fix signature of print functions (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Karol Herbst) [RHEL-180328]
  - drm/gem: Make the GEM LRU lock part of drm_device (Karol Herbst) [RHEL-180328]
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Karol Herbst) [RHEL-180328]
  - drm/bridge: megachips: remove bridge when irq request fails (Karol Herbst) [RHEL-180328]
  - drm/bridge: it66121: acquire reset GPIO in probe (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: Fix secondary queue error case (Karol Herbst) [RHEL-180328]
  - drm/virtio: use uninterruptible resv lock for plane updates (Karol Herbst) [RHEL-180328]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Karol Herbst) [RHEL-180328]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Karol Herbst) [RHEL-180328]
  - drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-180328]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Karol Herbst) [RHEL-180328]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Karol Herbst) [RHEL-180328]
  - drm: Replace old pointer to new idr (Karol Herbst) [RHEL-180328]
  - drm/loongson: Use managed KMS polling (Karol Herbst) [RHEL-180328]
  - drm/xe/xelp: Fix Wa_18022495364 (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Karol Herbst) [RHEL-180328]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Karol Herbst) [RHEL-180328]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Karol Herbst) [RHEL-180328]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Karol Herbst) [RHEL-180328]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow embedded connectors without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Karol Herbst) [RHEL-180328]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Karol Herbst) [RHEL-180328]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Karol Herbst) [RHEL-180328]
  - drm/i915/wm: Verify the correct plane DDB entry (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Karol Herbst) [RHEL-180328]
  - drm/fb-helper: Fix a locking bug in an error path (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Karol Herbst) [RHEL-180328]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Karol Herbst) [RHEL-180328]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Karol Herbst) [RHEL-180328]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add default case in DVI mode validation (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Update queue properties for metadata ring (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Fix xgmi max speed reporting (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix type size of remainder argument (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Removed commented line for MQD queue priority (Karol Herbst) [RHEL-180328]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Karol Herbst) [RHEL-180328]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Karol Herbst) [RHEL-180328]
  - dma-fence: Fix sparse warnings due __rcu annotations (Karol Herbst) [RHEL-180328]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Karol Herbst) [RHEL-180328]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Karol Herbst) [RHEL-180328]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Karol Herbst) [RHEL-180328]
  - drm/radeon: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm: Set old handle to NULL before prime swap in change_handle (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-180328]
  - drm/udl: Increase GET_URB_TIMEOUT (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Karol Herbst) [RHEL-180328]
  - drm/appletbdrm: Use kvzalloc for big allocations (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce: Prevent partial address patches (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Karol Herbst) [RHEL-180328]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Karol Herbst) [RHEL-180328]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Karol Herbst) [RHEL-180328]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Karol Herbst) [RHEL-180328]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Karol Herbst) [RHEL-180328]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Add affected colorops with affected planes (Karol Herbst) [RHEL-180328]
  - drm/colorop: Preserve bypass value in duplicate_state() (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Karol Herbst) [RHEL-180328]
  - drm/imagination: Fix segfault when updating ftrace mask (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Karol Herbst) [RHEL-180328]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Karol Herbst) [RHEL-180328]
  - drm/arcpgu: fix device node leak (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: replace PASID IDR with XArray (Karol Herbst) [RHEL-180328]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178409] {CVE-2026-43501}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (CKI Backport Bot) [RHEL-174787] {CVE-2026-43341}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172518] {CVE-2026-31786}
  - Revert "ext4: switch to using the crc32c library" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove redundant function ext4_has_metadata_csum" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sbi argument from ext4_chksum()" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sb argument from ext4_superblock_csum()" (Brian Foster) [RHEL-159116]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-263.el10]
changelog:
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504]
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226716] {CVE-2026-43493}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231458] {CVE-2026-64277}
  - iommu/vt-d: Avoid WARNING in sva unbind path (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add invalidation entry_num and entry_len boundary tests (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Cover invalid read counts on vEVENTQ FD (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add boundary tests for veventq_depth (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Clarify IOAS_MAP_FILE dma-buf support (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Destroy the pages content after detaching from dmabuf (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set veventq_depth upper bound (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Move vevent memory allocation outside spinlock (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Fix the end_index calculation in __map_range_leaf() (Jerry Snitselaar) [RHEL-213791]
  - iommu: Handle unmap error when iommu_debug is enabled (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64152}
  - iommu: Fix up map/unmap debugging for iommupt domains (Jerry Snitselaar) [RHEL-213791]
  - iommu: Fix loss of errno on map failure for classic ops (Jerry Snitselaar) [RHEL-213791]
  - iommu: Ensure .iotlb_sync is called correctly (Jerry Snitselaar) [RHEL-213791]
  - iommu: Do not call drivers for empty gathers (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64151}
  - iommu/vt-d: Restore IOMMU_CAP_CACHE_COHERENCY (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Always allow DMA-FQ when iommupt provides the iommu_domain (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Avoid rewalking during map (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Directly call iommupt's unmap_range() (Jerry Snitselaar) [RHEL-213791]
  - iommu/iova: Add NULL check in iova_magazine_free() (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Optimize the gather processing for DMA-FQ mode (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64186}
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix illegal device-id access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param (Jerry Snitselaar) [RHEL-213791]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53164}
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix data_len byte-count vs element-count mismatch (Jerry Snitselaar) [RHEL-213791]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix premature break in init_iommu_one() (Jerry Snitselaar) [RHEL-213791]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53283}
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Jerry Snitselaar) [RHEL-213791]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Jerry Snitselaar) [RHEL-213791]
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: move dma_map_resource() sanity check into debug code (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64149}
  - iommu/amd: Fix precedence order in set_dte_passthrough() (Jerry Snitselaar) [RHEL-213791]
  - iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix a race with concurrent allocation and unmap (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Jerry Snitselaar) [RHEL-213791]
  - iommufd: vfio compatibility extension check for noiommu mode (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-213791]
  - x86/sev: Fix broken SNP support with KVM module built-in (Jerry Snitselaar) [RHEL-213791]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-213791]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-213791]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Jerry Snitselaar) [RHEL-213791]
  - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210962] {CVE-2025-21834}
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-117335]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115124] {CVE-2026-43079}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115124] {CVE-2026-43344}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115124]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117335]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115120 RHEL-117335]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-117337]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115122]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120357]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95668]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188220] {CVE-2026-52923}
  - KVM: arm64: account pKVM reclaim against the VM mm (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Set IL in fake ESR for pKVM memory sharing exit (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Initialize parser_state before pgtable walk (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Expose shadow page tables in debugfs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Make KVM ptdump code s2 mmu aware (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore S1PIE register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore TCR2_EL1 register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename PKVM_PAGE_STATE_MASK (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest hvcs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover forced reclaim (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Register 'selftest_vm' in the VM table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest donation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add some initial documentation for pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_UNSHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_SHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add hvc handler at EL2 for hypercalls from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Return -EFAULT from VCPU_RUN on access to a poisoned pte (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reclaim faulting page from pKVM in spurious fault handler (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce hypercall to force reclaim of a protected page (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fully update VNCR fixmap state in kvm_translate_vncr() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Inject SEA TTW when desc update can't write to GPA (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Restart stage-1 walk if stage-2 desc update fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't pass host_debug_state to BRBE world-switch routines (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest donate (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest share (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make EL2 exception entry and exit context-synchronization events (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Annotate guest donations with handle and gfn in host stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Change 'pkvm_handle_t' to u16 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce host_stage2_set_owner_metadata_locked() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Generalise kvm_pgtable_stage2_set_owner() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid pointless annotation when mapping host-owned pages (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Inject SIGSEGV on illegal accesses (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Support translation faults in inject_host_exception() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Factor out pKVM host exception injection logic (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up reclaim hypercall to pkvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_reclaim_dying_guest_page() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't advertise unsupported features for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix block mapping validity check in stage-1 walker (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly identify executable PTEs at stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restore POR_EL0 access to host EL0 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restart instruction upon race in __kvm_at_s12() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wire AT S1E1A in the system instruction handling table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Key CPTR_EL2.E0POE propagation on FEAT_S1POE (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __pkvm_init_vm error path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reset page order in pKVM hyp_pool (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle permission faults with guest_memfd (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle aborts from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_host_donate_guest() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove unused PKVM_ID_FFA definition (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove is_protected_kvm_enabled() checks from hypercalls (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Expose self-hosted debug regs as RAZ/WI for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up donation hypercall to pkvm_pgtable_stage2_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Split teardown hypercall into two phases (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename __pkvm_pgtable_stage2_unmap() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move handle check into pkvm_pgtable_stage2_destroy_range() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore -EAGAIN when mapping in pages for the pKVM host (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Prevent unsupported memslot operations on protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore MMU notifier callbacks for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Convert gmem_abort() to struct kvm_s2_fault_desc (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify integration of adjust_nested_*_perms() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Directly expose mapping prot and kill kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move device mapping management into kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace force_pte with a max_map_size attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move kvm_s2_fault.{pfn,page} to kvm_s2_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restrict the scope of the 'writable' attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill logging_active from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move VMA-related information to kvm_s2_fault_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill topup_memcache from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill exec_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill write_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Constrain fault_granule to kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace fault_is_perm with a helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move fault context to const structure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make fault_ipa immutable (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill fault->ipa (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clean up control flow in kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hoist MTE validation check out of MMU lock path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Optimize early exit checks in kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Initialize struct kvm_s2_fault completely at declaration (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify return logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove redundant state variables from struct kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify nested VMA shift calculation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract page table mapping in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract stage-2 permission logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Isolate mmap_read_lock inside new kvm_s2_fault_get_vma_info() helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract PFN resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce struct kvm_s2_fault to user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract VMA size resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix typo in feature check comments (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak stage-2 page-table if VM fails to init under pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Read PMUVer as unsigned (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Use pmuv3_implemented() function (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (Sebastian Ott) [RHEL-180320]
  - selftests/cgroup: include slab in test_percpu_basic memory check (Waiman Long) [RHEL-154159]
  - selftests/cgroup: fix hardcoded page size in test_percpu_basic (Waiman Long) [RHEL-154159]
  - selftests/cgroup: test_zswap: wait for asynchronous writeback (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap attempt_writeback() on 64K pagesize system (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap test_no_invasive_cgroup_shrink on large pagesize system (Waiman Long) [RHEL-154157]
  - selftests/cgroup: replace hardcoded page size values in test_zswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: rename PAGE_SIZE to BUF_SIZE in cgroup_util (Waiman Long) [RHEL-154157]
  - selftests/cgroup: use runtime page size for zswpin check (Waiman Long) [RHEL-154157]
  - selftests/cgroup: avoid OOM in test_swapin_nozswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: skip test_zswap if zswap is globally disabled (Waiman Long) [RHEL-154157]
  - selftests/cgroup: Fix error path leaks in test_percpu_basic (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix string comparison in write_test (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix cg_read_strcmp() empty string comparison (Waiman Long) [RHEL-184801]
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long) [RHEL-184801]
  - selftests: cgroup: make test_memcg_sock robust against delayed sock stats (Waiman Long) [RHEL-184801]
  - selftests: cgroup: Add cg_read_key_long_poll() to poll a cgroup key with retries (Waiman Long) [RHEL-184801]
  - selftests: complete kselftest include centralization (Waiman Long) [RHEL-184801]
  - selftests/cgroup: conform test to KTAP format output (Waiman Long) [RHEL-184801]
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long) [RHEL-184801]
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long) [RHEL-184801]
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Waiman Long) [RHEL-184801]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Antoine Tenart) [RHEL-152712]
  - ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152712]
  - ipv6: anycast: insert aca into global hash under idev->lock (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152712]
  - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152712]
  - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Antoine Tenart) [RHEL-152712]
  - ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Antoine Tenart) [RHEL-152712]
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152712]
  - ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152712]
  - ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152712]
  - ipv6: update route serial number on NETDEV_CHANGE (Antoine Tenart) [RHEL-152712]
  - ipv6: Implement limits on extension header parsing (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152712]
  - net: ioam6: fix OOB and missing lock (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152712]
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152712]
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Antoine Tenart) [RHEL-152712]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152712]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712] {CVE-2026-43186}
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Antoine Tenart) [RHEL-152712]
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Antoine Tenart) [RHEL-152712]
  - ipv6: annotate data-race in ndisc_router_discovery() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152712]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-264.el10]
changelog:
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808]
  - net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808]
  - ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808]
  - accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446}
  - accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328}
  - accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424}
  - accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280}
  - accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288}
  - accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295}
  - accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341}
  - accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908}
  - accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980}
  - accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931}
  - accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308}
  - accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303}
  - accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546]
  - drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731}
  - accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546]
  - drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546]
  - drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546]
  - drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546]
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458]
  - redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943]
  - rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113}
  - tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180]
  - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031]
  - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669}
  - net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212]
  - net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212]
  - net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212]
  - net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212]
  - l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732]
  - l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732]
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724]
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736]
  - seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736]
  - seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736]
  - seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736]
  - seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-16.alma.1
changelog:
  - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm-
    logo.png to watermark.png in the spinner theme directory to ensure the
    AlmaLinux watermark is displayed in plymouth.


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 7:6.1.0-2
changelog:
  - Rebuild for Go and security fixes
  - Resolves: RHEL-190079, RHEL-190852, RHEL-241124, RHEL-241361, RHEL-241463, RHEL-241829, RHEL-241930, RHEL-242162


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176547


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 16.14-2
changelog:
  - Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
  - Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
  - Backport SSLerrmessageExt() helper for improved error reporting
  - Update GUC description to document colon-separated group list support
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 16.14-3
changelog:
  - Add SSL test coverage for colon-separated ssl_ecdh_curve group list
  - Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Attila Lakatos <alakatos@redhat.com> - 4.2.1-1
changelog:
  - Rebase to 4.2.1
  - Revert /run/audit/ migration (selinux-policy not yet updated, RHEL-224026)
    Resolves: RHEL-172047
  - Prevent netlink congestion causing ENOBUFS errors under heavy file system activity
    Resolves: RHEL-102929
  - Fix auditctl -h printing spurious error message
    Resolves: RHEL-185097


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.0-8
changelog:
  - Accept output_buffer_limit as an alias for max_output_length
    in Decompressor.process() for forward compatibility with upstream 1.2.0
  - Resolves: RHEL-221151


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 6.2.1.11-3.git4b3e853
changelog:
  - Fix IQN name validation (CVE-2026-44943)
  - Fix iscsiuio control-socket credential verification (CVE-2026-44944)


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.3.4-2
changelog:
  - Fix issues identified via Coverity static analysis
  - Fix test_validate_transcendentals skip to match SVML dispatch
  - Fix signed overflow issue in npy_gcd for INT_MIN on s390x
  - Enable CET hardware protections
  - Fixes: RHEL-137130, RHEL-161528, RHEL-160066, RHEL-238378


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425]
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749]
  - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584]
  - Resolves: RHEL-147425
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-132749
    (Migrate SCSI PR state and preempt reservation upon live migration)
  - Resolves: RHEL-134989
    (Hotplugged interface device can not be shown in the guest)
  - Resolves: RHEL-146584
    ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-19
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174858]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174858]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174858]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174858]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174858]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174858]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174858]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174858]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174858]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174858]
  - kvm-hw-pci-host-gpex-acpi-Fix-_DSM-function-0-support-re.patch [RHEL-138494]
  - kvm-vfio-scsi-ui-Error-check-qio_channel_socket_connect_.patch [RHEL-138494]
  - kvm-vfio-igd-Enable-quirks-when-IGD-is-not-the-primary-d.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-amd-xgbe-device.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-calxeda-xgmac-device.patch [RHEL-138494]
  - kvm-hw-arm-virt-Include-system-system.h.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-platform.patch [RHEL-138494]
  - kvm-vfio-Move-vfio-region.h-under-hw-vfio.patch [RHEL-138494]
  - kvm-vfio-container-set-error-on-cpr-failure.patch [RHEL-138494]
  - kvm-vfio-Report-an-error-when-the-dma_max_mappings-limit.patch [RHEL-138494]
  - kvm-hw-vfio-user-add-x-pci-class-code.patch [RHEL-138494]
  - kvm-vfio-Introduce-helper-vfio_pci_from_vfio_device.patch [RHEL-138494]
  - kvm-vfio-vfio-container-base.h-update-VFIOContainerBase-.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-update-VFIOContainer-declarati.patch [RHEL-138494]
  - kvm-hw-vfio-cpr-legacy.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-rename-VFIOContainer-bcontaine.patch [RHEL-138494]
  - kvm-vfio-user-container.h-update-VFIOUserContainer-decla.patch [RHEL-138494]
  - kvm-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-container.h-rename-VFIOUserContainer-bcont.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-update-VFIOUserPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-VFIOUserPCIDevice-device-fiel.patch [RHEL-138494]
  - kvm-vfio-pci.h-update-VFIOPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-pci-quirks.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-igd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-pci.h-rename-VFIOPCIDevice-pdev-field-to-parent.patch [RHEL-138494]
  - kvm-treewide-handle-result-of-qio_channel_set_blocking.patch [RHEL-138494]
  - kvm-vfio-pci-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-vfio-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-VFIOContaine.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-VFIOCon.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-file-to-vfio.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-file-to.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-rename-file-to-container-legacy..patch [RHEL-138494]
  - kvm-hw-vfio-container-base.c-rename-file-to-container.c.patch [RHEL-138494]
  - kvm-vfio-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-iommufd.h-rename-VFIOContainer-bcontainer-.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-spapr.c-rename-VFIOContainer-bcontainer-field-t.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_init-to-vfio_pci_ini.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_finalize-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_class_init-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_info-to-vfio_pci_info.patch [RHEL-138494]
  - kvm-s390x-s390-pci-vfio.c-use-QOM-casts-where-appropriat.patch [RHEL-138494]
  - kvm-hw-vfio-types.h-rename-TYPE_VFIO_PCI_BASE-to-TYPE_VF.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_class_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_info-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_properties-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_nohotplug_properties-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_properties-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_finalize-t.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-device.h-fix-include-header-gua.patch [RHEL-138494]
  - kvm-vfio-Remove-workaround-for-kernel-DMA-unmap-overflow.patch [RHEL-138494]
  - kvm-system-iommufd-Use-uint64_t-type-for-IOVA-mapping-si.patch [RHEL-138494]
  - kvm-hw-vfio-Reorder-vfio_container_query_dirty_bitmap-tr.patch [RHEL-138494]
  - kvm-hw-vfio-Avoid-ram_addr_t-in-vfio_container_query_dir.patch [RHEL-138494]
  - kvm-hw-vfio-Use-uint64_t-for-IOVA-mapping-size-in-vfio_c.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_subsection_lo.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_load_state.patch [RHEL-138494]
  - kvm-migration-Remove-error-variant-of-vmstate_save_state.patch [RHEL-138494]
  - kvm-migration-multi-mode-notifier.patch [RHEL-138494]
  - kvm-migration-add-cpr_walk_fd.patch [RHEL-138494]
  - kvm-oslib-qemu_clear_cloexec.patch [RHEL-138494]
  - kvm-migration-cpr-exec-command-parameter.patch [RHEL-138494]
  - kvm-migration-cpr-exec-save-and-load.patch [RHEL-138494]
  - kvm-migration-cpr-exec-mode.patch [RHEL-138494]
  - kvm-migration-cpr-exec-docs.patch [RHEL-138494]
  - kvm-vfio-cpr-exec-mode.patch [RHEL-138494]
  - kvm-hw-vfio-listener-Include-missing-exec-target_page.h-.patch [RHEL-138494]
  - kvm-hw-Remove-unnecessary-system-ram_addr.h-header.patch [RHEL-138494]
  - kvm-vfio-container-Remap-only-populated-parts-in-a-secti.patch [RHEL-138494]
  - kvm-vfio-cpr-legacy-drop-an-erroneous-assert.patch [RHEL-138494]
  - kvm-vfio-iommufd-Set-cpr.ioas_id-on-source-side-for-CPR-.patch [RHEL-138494]
  - kvm-vfio-iommufd-Restore-vbasedev-s-reference-to-hwpt-af.patch [RHEL-138494]
  - kvm-vfio-container-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-iommufd-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-listener-Add-an-assertion-for-unmap_all.patch [RHEL-138494]
  - kvm-vfio-Clean-up-includes.patch [RHEL-138494]
  - kvm-migration-set-correct-list-pointer-when-removing-not.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_process.patch [RHEL-138494]
  - kvm-vfio-user-clarify-partial-message-handling.patch [RHEL-138494]
  - kvm-vfio-user-refactor-out-header-handling.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_recv_one.patch [RHEL-138494]
  - kvm-vfio-user-recycle-msg-on-failure.patch [RHEL-138494]
  - kvm-include-hw-hyperv-Remove-unused-struct-mshv_vp_regis.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.18-rc3.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.19-rc1.patch [RHEL-138494]
  - kvm-hw-vfio-Add-helper-to-retrieve-device-feature.patch [RHEL-138494]
  - kvm-hw-vfio-region-Create-dmabuf-for-PCI-BAR-per-region.patch [RHEL-138494]
  - Resolves: RHEL-174858
    ([rhel10] Backport qemu cross-kernel migration mitigation series)
  - Resolves: RHEL-138494
    (NVIDIA:Grace-Hopper:Backport vfio: Add DMABUF support for PCI BAR regions - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-20
changelog:
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-178767]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-178767]
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-155807]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-155807]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-155807]
  - kvm-hw-tpm-tpm_tis_sysbus-defer-resource-allocation-to-r.patch [RHEL-178846]
  - kvm-vfio-container-Restrict-dma_map_file-to-shared-RAM-o.patch [RHEL-180750]
  - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-153123]
  - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-153123]
  - Resolves: RHEL-178767
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)
  - Resolves: RHEL-155807
    (live migration failed the VM just register key only [rhel-10.3])
  - Resolves: RHEL-178846
    ([aarch64] qemu-kvm crashes on --device tpm-tis-device,?)
  - Resolves: RHEL-180750
    (Backport in QEMU : vfio/container: Restrict dma_map_file() to shared RAM or RAM devices)
  - Resolves: RHEL-153123
    (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-21
changelog:
  - kvm-hw-vfio-sort-and-validate-sparse-mmap-regions-by-off.patch [RHEL-150900]
  - kvm-vfio-Add-Error-parameter-to-vfio_region_setup.patch [RHEL-150900]
  - kvm-hw-vfio-align-mmap-to-power-of-2-of-region-size-for-.patch [RHEL-150900]
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184530]
  - Resolves: RHEL-150900
    (NVIDIA:Grace:Backport hw/vfio: Enable hugepfnmap for non-power-of-2 device memory regions - RHEL 10.3)
  - Resolves: RHEL-184530
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.3])


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.1.0-21.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le
  - Fix ppc64le build: backport upstream QOM cast in spapr_pci_vfio.c


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-22
changelog:
  - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-121686]
  - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-121686]
  - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-121686]
  - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-121686]
  - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-121686]
  - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-121686]
  - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-121686]
  - kvm-block-graph-lock-fix-missed-wakeup-in-bdrv_graph_co_.patch [RHEL-186384]
  - kvm-block-curl-fix-curl-internal-handles-handling.patch [RHEL-186384]
  - kvm-block-curl.c-Use-explicit-long-constants-in-curl_eas.patch [RHEL-186384]
  - kvm-block-curl.c-Fix-CURLOPT_VERBOSE-parameter-type.patch [RHEL-186384]
  - kvm-block-curl-fix-concurrent-completion-handling.patch [RHEL-186384]
  - kvm-block-curl-free-s-password-in-cleanup-paths.patch [RHEL-186384]
  - kvm-nvme-Kick-and-check-completions-in-BDS-context.patch [RHEL-186384]
  - kvm-nvme-Note-in-which-AioContext-some-functions-run.patch [RHEL-186384]
  - kvm-block-remove-detached-header-option-from-opts-after-.patch [RHEL-186384]
  - kvm-block-fix-luks-amend-when-run-in-coroutine.patch [RHEL-186384]
  - kvm-qed-Don-t-try-to-flush-during-incoming-migration.patch [RHEL-186384]
  - kvm-block-vmdk-fix-OOB-read-in-vmdk_read_extent.patch [RHEL-186384]
  - kvm-block-throttle-groups-fix-deadlock-with-iolimits-and.patch [RHEL-186384]
  - kvm-throttle-group-Fix-race-condition-in-throttle_group_.patch [RHEL-186384]
  - kvm-qemu-img-Fix-amend-option-parse-error-handling.patch [RHEL-186384]
  - kvm-qemu-img-rebase-don-t-exceed-IO_BUF_SIZE-in-one-oper.patch [RHEL-186384]
  - kvm-python-backport-drop-Python3.6-workarounds.patch [RHEL-186384]
  - kvm-python-backport-Remove-deprecated-get_event_loop-cal.patch [RHEL-186384]
  - kvm-python-backport-avoid-creating-additional-event-loop.patch [RHEL-186384]
  - kvm-iotests-147-ensure-temporary-sockets-are-closed-befo.patch [RHEL-186384]
  - kvm-iotests-151-ensure-subprocesses-are-cleaned-up.patch [RHEL-186384]
  - kvm-tests-qemu-iotest-fix-iotest-024-with-qed-images.patch [RHEL-186384]
  - kvm-tests-qemu-iotests-Fix-check-for-existing-file-in-_r.patch [RHEL-186384]
  - kvm-async-access-bottom-half-flags-with-qatomic_read.patch [RHEL-186384]
  - kvm-block-linux-aio-bound-ioq_submit-recursion-depth.patch [RHEL-186384]
  - kvm-block-io-fallback-to-bounce-buffer-if-BLKZEROOUT-is-.patch [RHEL-186384]
  - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-186384]
  - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-186384]
  - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-186384]
  - kvm-virtio-Fix-crash-when-sriov-pf-is-set-for-non-PCI-Ex.patch [RHEL-186384]
  - kvm-virtio-scsi-pass-the-same-cdb_size-to-virtio_scsi_po.patch [RHEL-186384]
  - kvm-hw-scsi-avoid-deadlock-upon-TMF-request-cancelling-w.patch [RHEL-186384]
  - kvm-virtio-blk-fix-zone-report-buffer-out-of-memory-CVE-.patch [RHEL-186384]
  - kvm-ide-Fix-potential-assertion-failure-on-VM-stop-for-P.patch [RHEL-186384]
  - kvm-block-Create-DEFAULT_BLOCK_CONF-macro.patch [RHEL-186384]
  - kvm-block-Add-more-defaults-to-DEFAULT_BLOCK_CONF.patch [RHEL-186384]
  - kvm-block-mirror-check-range-when-setting-zero-bitmap-fo.patch [RHEL-186384]
  - kvm-iotests-test-active-mirror-with-unaligned-small-writ.patch [RHEL-186384]
  - kvm-block-mirror-fix-assertion-failure-upon-duplicate-co.patch [RHEL-186384]
  - kvm-commit-Drain-nodes-across-all-of-bdrv_commit.patch [RHEL-186384]
  - kvm-qemu-io-Add-aio_discard-command.patch [RHEL-186384]
  - kvm-qcow2-Fix-corruption-on-discard-during-write-with-CO.patch [RHEL-186384]
  - kvm-iotests-046-Test-that-discard-write_zeroes-wait-for-.patch [RHEL-186384]
  - kvm-qcow2-Fix-data-loss-on-zero-write-with-detect-zeroes.patch [RHEL-186384]
  - kvm-block-Fix-crash-after-setting-latency-historygram-wi.patch [RHEL-186384]
  - Resolves: RHEL-121686
    (qemu-kvm hung during drain after double pause)
  - Resolves: RHEL-186384
    (virt-storage: Backport stable branch fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-23
changelog:
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vde.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Factor-out-common-helper-function.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-add-memory-regions-as-property-for-an-SM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Extract-common-definitions-to-smmuv3-c.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Make-iommu-ops-part-of-SMMUState.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-smmuv3-accel-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Initialize-shared-system-address.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Move-pci_init_bus_master-after-adding-dev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Export-pci_device_get_iommu_bus_devfn-and-ret.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Add-optional-supports_address_space-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-bridge-pci_expander_bridge-Move-TYPE_PXB_PCIE.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Restrict-accelerated-SMMUv3-to-v.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Implement-get_viommu_cap-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_viommu_flags.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_host_iommu_quirks.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Define-STE-CD-fields-via-regist.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-NSCFG-bit-definition-for-CD.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-STE-CD-set-helpers-for-repe.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-set-unset_iommu_device-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-propagate-smmuv3_cmdq_consume-errors-t.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-nested-vSTE-install-uninstal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Install-SMMUv3-GBPA-based-hwpt.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Introduce-a-callback-to-retrieve-the-MSI-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-get_msi_direct_gpa-cal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-msi-gpa-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-to-issue-invalidatio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Initialize-ID-registers-early-during-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Get-host-SMMUv3-hw-info-and-vali.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-host-gpex-Allow-to-generate-preserve-boot-con.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-PCI-preserve_config-for-accel-SMMUv3.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Prepare-for-IORT-reviso.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-build-Add-IORT-RMR-regions-to-handl.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Update-IORT-blobs-after.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Block-migration-when-accel-is-enabled.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-accel-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-a-property-to-specify-RIL-su.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-for-ATS.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-property-to-specify-OAS-bits.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Retrieve-PASID-width-from-iommufd_b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Add-get_pasid_info-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Add-helper-to-insert-PCIe-extended-capability.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Factor-out-common-PASID-capability-initializa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-pci-Synthesize-PASID-capability-for-vfio-pci.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Make-SubstreamID-support-configu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-memory-Factor-address_space_is_io-out.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-target-i386-arch_memory_mapping-Use-address_space_me.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-s390x-sclp-Use-address_space_memory_is_io-in-sclp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-physmem-Remove-cpu_physical_memory_is_io.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-viommu-free-helper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Allocate-vEVENTQ-for-accelerated.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Introduce-a-helper-function-for-event-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Read-and-propagate-host-vIOMMU-e.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Correct-SMMUEN-field-name-in-CR0.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Fix-CFGI_CD-handling-when-stage-1-is-u.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Check-ATS-compatibility-between-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ats-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ril-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-a-SsidSizeMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ssidsize-property-type-to.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-an-OasMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-oas-property-type-to-OasM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Document-arm-smmuv3-device-s-accel-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Have-smmuv3_accel_init-take-an-Error-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Update-ATC-invalidation-check.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Improve-accel-SMMUv3-usage-documentati.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-helper-for-resolving-auto-pa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ats.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ril.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ssidsiz.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-oas.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Set-default-ats-ril-ssidsize-oas-to-au.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Support-auto-for-accel-SMMUv3-proper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Enforce-pci_setup_iommu_per_bus-is-called.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-vfio-iommufd-Force-creating-nesting-parent-HWPT.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-iommufd-Control-dirty-tracking-for-nesting-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_get_device_i.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-iommufd-Rename-all-the-idev-and-idevc-variables-to-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_alloc_viommu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_hw_.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_viommu_mm.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-iommufd-Remove-unused-viommu-pointer-from-IOM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-CMDQV-ops-interface.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Avoid-including-CONFIG_DEVICES-in-hw-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Add-Tegra241-CMDQV-ops-backend.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Wire-CMDQV-ops-into-accel-lifecy.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Use-stored-SMMUv3-device-list-for-IORT-b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Probe-host-Tegra241-CMDQV-supp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-init.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Link-SMMUv3-CMDQV-resources-to-platform-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-vIOMMU-alloc-f.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-mmap-host-VINTF-Page0-for-CMDQ.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-CMDQ-V-Config-region.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-reads.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-writes.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Allocate-HW-VCMDQs-once-config.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Route-allocated-VCMDQ-Page0-ac.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-memory-Allow-RAM-device-regions-to-skip-IOMMU-mappin.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Use-mmap-d-host-VINTF-page0-fo.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-common-helper-for-veve.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Read-and-propagate-Tegra241-CM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Initialize-register-state-on-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Limit-queue-size-based-on-back.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-per-device-identifier-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-helper-to-query-CMDQV-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-Advertise-Tegra241-CMDQV-nodes-in-D.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Enforce-viommu-association-when-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Document-the-CMDQV-design-and-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-cmdqv-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-rh-aarch64-rh-devices.mak-Add-CONFIG_TEGRA241_CMDQV.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - Resolves: RHEL-142465
    ([RHEL-10.1][ARM]: Two smmuv3 devices can be attached to the same bus)
  - Resolves: RHEL-160190
    (NVIDIA:Backport hw/arm/smmuv3-accel: Support AUTO properties - RHEL 10.3)
  - Resolves: RHEL-163596
    (NVIDIA:Backport hw/arm/smmuv3-accel: Resolve AUTO properties - RHEL 10.3)
  - Resolves: RHEL-73794
    (NVIDIA:Grace-Hopper:Backport HW accelerated nesting support for arm SMMUv3 - RHEL 10.1)
  - Resolves: RHEL-73796
    (NVIDIA:Grace-Hopper:Backport vEVENTQ support for smmuv3 - RHEL 10.1)
  - Resolves: RHEL-73798
    (NVIDIA:Grace-Hopper:Backport CMDQV support - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-24
changelog:
  - kvm-net-tap-linux.c-avoid-abort-when-setting-invalid-fd.patch [RHEL-113894]
  - kvm-crypto-only-verify-CA-certs-in-chain-of-trust.patch [RHEL-111934]
  - kvm-crypto-remove-extraneous-pointer-usage-in-gnutls-cer.patch [RHEL-111934]
  - kvm-crypto-fix-error-reporting-in-cert-chain-checks.patch [RHEL-111934]
  - kvm-crypto-allow-client-server-cert-chains.patch [RHEL-111934]
  - kvm-crypto-stop-requiring-key-encipherment-usage-in-x509.patch [RHEL-111934]
  - kvm-crypto-switch-to-newer-gnutls-API-for-distinguished-.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-parameter-checking-CA-certs.patch [RHEL-111934]
  - kvm-crypto-add-missing-free-of-certs-array.patch [RHEL-111934]
  - kvm-crypto-replace-stat-with-access-for-credential-check.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-access-checks-before-loading.patch [RHEL-111934]
  - kvm-crypto-move-check-for-TLS-creds-dir-property.patch [RHEL-111934]
  - kvm-crypto-use-g_autofree-when-loading-x509-credentials.patch [RHEL-111934]
  - kvm-crypto-remove-needless-indirection-via-parent_obj-fi.patch [RHEL-111934]
  - kvm-crypto-move-release-of-DH-parameters-into-TLS-creds-.patch [RHEL-111934]
  - kvm-crypto-shorten-the-endpoint-server-check-in-TLS-cred.patch [RHEL-111934]
  - kvm-crypto-remove-duplication-loading-x509-CA-cert.patch [RHEL-111934]
  - kvm-crypto-reduce-duplication-in-handling-TLS-priority-s.patch [RHEL-111934]
  - kvm-crypto-introduce-method-for-reloading-TLS-creds.patch [RHEL-111934]
  - kvm-crypto-introduce-a-wrapper-around-gnutls-credentials.patch [RHEL-111934]
  - kvm-crypto-fix-lifecycle-handling-of-gnutls-credentials-.patch [RHEL-111934]
  - kvm-crypto-make-TLS-credentials-structs-private.patch [RHEL-111934]
  - kvm-crypto-deprecate-use-of-external-dh-params.pem-file.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-CA-certs-twice.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-identity-certs-twice.patch [RHEL-111934]
  - kvm-crypto-expand-logic-to-cope-with-multiple-certificat.patch [RHEL-111934]
  - kvm-crypto-support-upto-5-parallel-certificate-identitie.patch [RHEL-111934]
  - kvm-docs-creation-of-x509-certs-compliant-with-post-quan.patch [RHEL-111934]
  - kvm-iommufd-Introduce-handler-for-device-ATS-support.patch [RHEL-184675]
  - kvm-vfio-pci-Add-ats-property.patch [RHEL-184675]
  - Resolves: RHEL-113894
    ([RHEL.10.2][virual network] Hit qemu coredump when removed an interface that the guest is using from the host)
  - Resolves: RHEL-111934
    (QEMU support for loading multiple sets of x509 certs for PQC hybrid mode)
  - Resolves: RHEL-184675
    (NVIDIA:Backport vfio/pci: add vfio-pci ATS control property - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-25
changelog:
  - kvm-hw-core-platform-bus-guard-platform_bus_get_mmio_add.patch [RHEL-180837]
  - kvm-hw-tpm-gate-PPI-support-on-tpm-tis-device-behind-a-d.patch [RHEL-180837]
  - kvm-hw-tpm-default-tpm-tis-device-PPI-to-disabled.patch [RHEL-180837]
  - kvm-s390x-css-limit-number-of-CHPIDs-in-description.patch [RHEL-192791]
  - kvm-s390x-ioinst-Require-strict-length-and-format-for-SE.patch [RHEL-192791]
  - kvm-s390x-pci-Shrink-RPCIT-ranges-to-registered-window.patch [RHEL-192791]
  - kvm-s390x-pci-Tighten-region-detection-for-BAR-read-writ.patch [RHEL-192791]
  - kvm-s390x-sclp-reject-invalid-write-event-data-headers.patch [RHEL-192791]
  - kvm-s390x-kvm-clamp-stsi-3.2.2-size.patch [RHEL-192791]
  - kvm-s390x-sclp-prevent-re-reading-the-sclp-header.patch [RHEL-192791]
  - kvm-s390x-sclpcpi-check-event-length-field-before-readin.patch [RHEL-192791]
  - kvm-s390x-css-firm-up-handling-of-chained-TIC-CCWs.patch [RHEL-192791]
  - Resolves: RHEL-180837
    ([aarch64] Live migration of TPM-equipped guests fails: Unknown ramblock "tpm-ppi" (qemu-kvm-10.1.0-19.el10 → older builds))
  - Resolves: RHEL-192791
    (RHEL10.0 - qemu s390x: interface harding fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-26
changelog:
  - kvm-vfio-region-Clarify-dma-buf-failure-messages.patch [RHEL-224652]
  - Resolves: RHEL-224652
    (Backport  vfio/region: Clarify dma-buf failure messages )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-27
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-151317]
  - Resolves: RHEL-151317
    (RHEL10 - KVM full Boot order support -- Guest is crashing for the invalid boot device(<boot order='1'/> -- add-on qcow2 file))


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-28
changelog:
  - kvm-system-memory-Use-memmove-for-directly-accessible-re.patch [RHEL-246035]
  - kvm-system-memory-Use-qemu_ram_move-for-directly-accessi.patch [RHEL-246035]
  - kvm-system-memory-Make-ram-device-region-directly-access.patch [RHEL-246035]
  - Resolves: RHEL-246035
    ([RHEL10.3] Exhausted DMA bounce buffer on building cuda-samples in VM)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase realtime-tests to the latest upstream
  - Added 3 patches and updated spec file
  Resolves: RHEL-144701


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Milan Crha <mcrha@redhat.com> - 0.9.1-12
changelog:
  - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
    Resolves: RHEL-213751


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-24
changelog:
  - Add support for %autosetup -C (RHEL-141269)
  - Add support for database parking (RHEL-126405)
  - Make syslog plugin actually useful and also required (RHEL-155272)
  - Require rpm-plugin-audit instead of just recommending (RHEL-139071)
  - Fix buffer overruns with long language strings (RHEL-169755)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-3
changelog:
  - Backport omelasticsearch PQC TLS parameters (tls.tlsversion, tls.ciphersuites,
  <<<<<<< HEAD
    tls.keyexchangegroups)
  =======
    tls.keyexchangegroups) and apply them during startup version detection
  >>>>>>> dad7741 (omelasticsearch: apply TLS options during startup detection)
    Resolves: RHEL-193505


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-4
changelog:
  - Backport: warn when imjournal fails to retrieve MESSAGE field from journal entry
    Resolves: RHEL-193508


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171246


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
changelog:
  - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
    Resolves: RHEL-181681
  - Fix information disclosure via MITM attack bypassing TLS in net-imap.
    (CVE-2026-42246)
    Resolves: RHEL-181769
  - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
    Resolves: RHEL-181799


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170933
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-170911
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169964


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-35
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
    Includes core fix plus additional performance optimizations 
    Resolves: RHEL-181680
  - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
    Resolves: RHEL-181753
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
    Resolves: RHEL-181785


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174898)
  - hyptop: Backward compatibility options causes other issues (RHEL-166157)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-170707)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136433)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136435)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73136)
  - Resolves: RHEL-174898 RHEL-166157 RHEL-170707 RHEL-136433 RHEL-136435 RHEL-73136


author: Dan Horák <dhorak@redhat.com> - 2:2.44.0-1
changelog:
  - rebased to 2.44.0 (RHEL-174898)
  - KVM: Quantum Safe SE Header and tooling support (RHEL-149687)
  - Introduce NVMe SMART data monitoring to the zpcimon service (RHEL-191175)
  - zkey key support for dm-integrity with HMAC (RHEL-23872)
  - fix zipl support for mixed type mdadm RAID1 devices (RHEL-180629)
  - Resolves: RHEL-174898 RHEL-149687 RHEL-191175 RHEL-23872 RHEL-180629


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-2
changelog:
  - Update GPL2 license texts to the latest version
  - Limit RPC request size in RequestReceiver to prevent memory exhaustion (RHEL-214326)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Jindrich Novy <jnovy@redhat.com> - 1.3.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.4
  - Resolves: RHEL-212009


author: Martin Osvald <mosvald@redhat.com> - 1.7.4.4-9
changelog:
  - Add openssl-groups option for post-quantum key exchange
  - Add test for openssl-groups option
    Resolves: RHEL-129232


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-15
changelog:
  - Resolves: RHEL-168094 - Squid crashes with assertion failure during shutdown
    when cache_dir is enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-8.p2
changelog:
  - Resolves: RHEL-95850 - A sudo'd command when invoked from ksh through a
    pipe mangles output, leaves tty insane


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-5
changelog:
  - Add extra SELinux policies.
    https://github.com/stefanberger/swtpm/issues/970
    Resolves: RHEL-70835
    Resolves: RHEL-73809


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-28
changelog:
  - man: reword the description of "secure pager" handling (RHEL-102939)
  - pager: also check for $SUDO_UID (RHEL-102939)
  - Revert "mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too" (RHEL-143028)
  - Revert "nspawn: enable usrquota support on /tmp/ and /dev/shm/" (RHEL-143028)
  - Revert "units: enable usrquota support on /tmp/" (RHEL-143028)
  - Revert "pid1: enable usrquota support on /dev/shm" (RHEL-143028)
  - Revert "udev-builtin-net-id: print cescaped bad attributes" (RHEL-180922)
  - homectl: apply all --member-of= groups from a comma-separated list (RHEL-180924)
  - udevadm: gracefully handle when a maked file is specified to udevadm verify/cat (RHEL-180917)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-29
changelog:
  - udev: drop redundant checks (RHEL-180923)
  - TEST-71-HOSTNAME: specify job mode for the stop job (#38413) (RHEL-180923)
  - test: wait for coredump to appear before parsing (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: rotate journal at one more place (RHEL-155454)
  - udev-rules: add missing device name prefix in log message (RHEL-180929)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-32
changelog:
  - resolved: replace assert() with error return in DNSSEC verify functions (RHEL-158349)
  - pid1: normalize oom error handling a bit (RHEL-169656)
  - sd-path: don't chop off trailing slash in sd_path apis, when user provided them (RHEL-169656)
  - systemd-path: order all listed paths by their ID alphabetically (RHEL-169656)
  - systemd-path: guarantee that tool exit status is zero on success (RHEL-169656)
  - systemd-path: add the usual ANSI sequences to --help text (RHEL-169656)
  - sd-path: expose credential store in sd-path (RHEL-169656)
  - execute: introduce a user-scoped credstore (RHEL-169656)
  - pid1: add support for decrypting per-user credentials (RHEL-169656)
  - test: add integration test that makes sure unpriv creds work correctly (RHEL-169656)
  - man: document the new per-use credstore paths (RHEL-169656)
  - update TODO (RHEL-169656)
  - cryptenroll/repart/creds: no longer default to binding against literal PCR 7 (RHEL-115813)
  - cryptenroll,repart: print a log message if no access restrictions are applied to TPM-based encryption (RHEL-115813)
  - repart: correct argument comment (RHEL-115813)
  - repart: use iovec structure for --key-file (RHEL-115813)
  - repart: make --tpm2-pcrs also configurable in repart.d/* (RHEL-115813)
  - repart: make --key-file also configurable in repart.d/* (RHEL-115813)
  - man/repart: fix typo (RHEL-115813)
  - man: systemd-measure. Remove 'tpm2-pcrs=' from cryptenroll command (#39590) (RHEL-115813)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-33
changelog:
  - hwdb,rules: add 82-net-auto-link-local.{hwdb,rules} to build (RHEL-72703)
  - Expand hwdb entries for additional hardware wallets (RHEL-72703)
  - hwdb: keyboard: hp omnibook ultra flip (RHEL-72703)
  - quirks: keyboard: d330 keyboard rework (RHEL-72703)
  - hwdb: sensor: correct D330 respecting panel mount (RHEL-72703)
  - hwdb: sensor: recover Duet 3 10IGL5 normal and LTE (RHEL-72703)
  - hwdb: sensor: remove Asus T101HA and T101HAF (RHEL-72703)
  - hwdb: quote invalid patterns in error messages (RHEL-72703)
  - Add sensor entry for Toshiba Encore WT10A-108 (RHEL-72703)
  - quirks: sensor: squash toshiba tablets (RHEL-72703)
  - Revert "hwdb: fix arrow keys on HP Elite Dragonfly G3" (RHEL-72703)
  - hwdb: don't error on empty hwdb file (RHEL-72703)
  - udev: rules: guess devices if internal or external (RHEL-72703)
  - udev: rules: integration add spi bus for input dev (RHEL-72703)
  - udev: rules: integration fix (RHEL-72703)
  - hwdb: update (RHEL-72703)
  - hwdb: update autosuspend rules (RHEL-72703)
  - hwdb: sensor: say that model sort is groupped (RHEL-72703)
  - hwdb: sensor: acer refactor and rework (RHEL-72703)
  - hwdb: sensor: aquarius rework (RHEL-72703)
  - hwdb: sensor: archos in-line commenting (RHEL-72703)
  - hwdb: sensor: asus refactor and rework (RHEL-72703)
  - hwdb: sensor: axxo fix previous search and replace (RHEL-72703)
  - hwdb: sensor: ayaneo refactor and rework (RHEL-72703)
  - hwdv: sensor: bmax add fixme notes (RHEL-72703)
  - hwdb: sensor: bush minor changes (RHEL-72703)
  - hwdb: sensor: chuwi refactor (RHEL-72703)
  - hwdb: sensor: connect fix (RHEL-72703)
  - hwdb: sensor: csl fix (RHEL-72703)
  - hwdb: sensor: cyberbook add comment (RHEL-72703)
  - hwdb: sensor: cytrix fix (RHEL-72703)
  - hwdb: sensor: cube refactor (RHEL-72703)
  - hwdb: sensor: dell rework (RHEL-72703)
  - hwdb: sensor: dere add comments (RHEL-72703)
  - hwdb: sensor: dexp rework (RHEL-72703)
  - hwdb: sensor: digibras in-line comment (RHEL-72703)
  - hwdb: sensor: digma in-line comment (RHEL-72703)
  - hwdb: sensor: endless add comment (RHEL-72703)
  - hwdb: sensor: estar add comment (RHEL-72703)
  - hwdb: sensor: eve in-line comment (RHEL-72703)
  - hwdb: sensor: exo add in-line comment (RHEL-72703)
  - hwdb: sensor: geo add in-line comment (RHEL-72703)
  - hwdb: sensor: glavey add colon to sensor dmi (RHEL-72703)
  - hwdb: sensor: gp add colon to sensor dmi (RHEL-72703)
  - hwdb: sensor: gpd refactor (RHEL-72703)
  - hwdb: sensor: hometech fix formatting (RHEL-72703)
  - hwdb: sensor: hp refactor (RHEL-72703)
  - hwdb: sensor: huawei add in-line comment (RHEL-72703)
  - hwdb: sensor: iota 360 is the model (RHEL-72703)
  - hwdb: sensor: it-works refactor (RHEL-72703)
  - hwdb: sensor: irbis in-line comentting (RHEL-72703)
  - hwdb: sensor: jumper prefer bios version over ct (RHEL-72703)
  - hwdb: sensor: kazam add in-line comment (RHEL-72703)
  - hwdb: sensor: kd kurio add in-line comment (RHEL-72703)
  - hwdb: sensor: lamina add comments (RHEL-72703)
  - hwdb: sensor: lenovo refactor (RHEL-72703)
  - hwdb: sensor: linx in-line comment (RHEL-72703)
  - hwdb: sensor: mediacom in-line comment (RHEL-72703)
  - hwdb: sensor: medion add fixme notes (RHEL-72703)
  - hwdb: sensor: metaphyuni in-line comment (RHEL-72703)
  - hwdb: sensor: microtech in-line comment (RHEL-72703)
  - hwdb: sensor: mpman in-line comment (RHEL-72703)
  - hwdb: sensor: msi add comment (RHEL-72703)
  - hwdb: sensor: myria in-line comment (RHEL-72703)
  - hwdb: sensor: nuvision refactor (RHEL-72703)
  - hwdb: sensor: odys add comment (RHEL-72703)
  - hwdb: sensor: onda refactor (RHEL-72703)
  - hwdb: sensor: one-netbook refactor (RHEL-72703)
  - hwdb: sensor: orangepi in-line comment (RHEL-72703)
  - hwdb: sensor: passion in-line comment (RHEL-72703)
  - hwdb: sensor: peaq add comment (RHEL-72703)
  - hwdb: sensor: pine64 in-line comment (RHEL-72703)
  - hwdb: sensor: pipo refactor (RHEL-72703)
  - hwdb: sensor: ployer in-line comment (RHEL-72703)
  - hwdb: sensor: point-of-view refactor (RHEL-72703)
  - hwdb: sensor: positivo simplify dmi matches (RHEL-72703)
  - hwdb: sensor: predia reformat dmi match (RHEL-72703)
  - hwdb: sensor: prowise add comment (RHEL-72703)
  - hwdb: sensor: purism in-line comment (RHEL-72703)
  - hwdb: sensor: reeder in-line comment (RHEL-72703)
  - hwdb: sensor: rca in-line comment (RHEL-72703)
  - hwdb: sensor: schneider remove number part match (RHEL-72703)
  - hwdb: sensor: teclast refactor (RHEL-72703)
  - hwdb: sensor: thundersoft reformat dmi match (RHEL-72703)
  - hwdb: sensor: toshiba refactor (RHEL-72703)
  - hwdb: sensor: trekstor in-line comment (RHEL-72703)
  - hwdb: sensor: voyo fix dmi match format (RHEL-72703)
  - hwdb: sensor: wortmann in-line comment (RHEL-72703)
  - hwdb: sensor: yours add comment (RHEL-72703)
  - hwdb: sensor: unknown add colon to sensor match (RHEL-72703)
  - hwdb: add Vernier Go Direct sensors (RHEL-72703)
  - hwdb: sensor: hp use board product name as hp-wmi (RHEL-72703)
  - hwdb: fix typos (RHEL-72703)
  - Add BNCF NewBook 11 ACCEL_MOUNT_MATRIX  to 60-sensor.hwdb (RHEL-72703)
  - udev: hwdb: replace ID_INPUT_JOYSTICK_INTEGRATION (RHEL-72703)
  - udev: rules: improve usb integration detection (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - hwdb: drop trailing whitespace (RHEL-72703)
  - hwdb: fix typos reported by Copilot, reword comment (RHEL-72703)
  - hwdb: use more modern python syntax in one more place (RHEL-72703)
  - hwdb: add one more USB ID for 3D Connexion SpaceMouse Wireless BT (#40890) (RHEL-72703)
  - hwdb/keyboard: Map FN key on Positron Proxima 15 (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: map Xiaomi Mi Notebook Pro star key to KEY_MACRO (RHEL-72703)
  - Fix media keys for Lenovo ThinkBook 14 2-in-1 G5 IAU (RHEL-72703)
  - hwdb: sensor: bncf reformat match (RHEL-72703)
  - hwdb: update HP Envy x360 patterns to cover newer 14-fc0xxx models (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb/keyboard: fix Positron vendor location (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: fix ABS_PRESSURE axis range for Goodix GXTP5100 touchpad (RHEL-72703)
  - hwdb/keyboard: Map FN key on Wareus B15 (RHEL-72703)
  - sensor: gpd fix matches (RHEL-72703)
  - hwdb: sensor: fix bncf newbook 11 (RHEL-72703)
  - hwdb: keyboard: erase entry that will never match (RHEL-72703)
  - hwdb: Add PXN HB S handbrake (RHEL-72703)
  - hwdb: Add keymaps for Acer Nitro 5 AN517-54 (RHEL-72703)
  - hwdb: Silence spurrious F23 key-press from Fn key on Thinkpad T14s (RHEL-72703)
  - hwdb/keyboard: fix enter key for X+ piccolo (RHEL-72703)
  - hwdb: sensor: aquarius improve comments (RHEL-72703)
  - hwdb: cooler master rgb controller is not a mouse (RHEL-72703)
  - hwdb: Add extended SteelSeries Arctis headset device support (#41628) (RHEL-72703)
  - sensor: gpd remove pocket 3 and 4 (RHEL-72703)
  - hwdb: sensor: add accel mount matrix for GPD WIN 5 (RHEL-72703)
  - hwdb: Add missing Steelseries Arctis Pro Wireless (RHEL-72703)
  - hwdb: add correct keyboard mapping for touchpad_toggle event on msi gs66 stealth laptop (RHEL-72703)
  - hwdb: add SOUND_FORM_FACTOR for Edifier M60 and Fractal Scape Dongle (RHEL-72703)
  - hwdb: add Fn-key mappings for MSI GE76 Raider 10UG (RHEL-72703)
  - hwdb: add force-release to Nitro AN515-58 backlight keys (RHEL-72703)
  - hwdb/keyboard: fix KP_Enter on Clevo PA70ES (RHEL-72703)
  - hwdb/keyboard: use vendor/product specific match for X+ Piccolo (RHEL-72703)
  - Revert "hwdb/keyboard: fix KP_Enter on Clevo PA70ES" (RHEL-72703)
  - hwdb/keyboard: Map f21 key on Wareus B15 (RHEL-72703)
  - 60-sensor.hwdb iio/accel fix for Advan Evo-X 13 (#42037) (RHEL-72703)
  - hwdb: Add keymap for Lenovo 15IRX9 (#42141) (RHEL-72703)
  - parse_hwdb: introduce local variable for boolean syntax (RHEL-72703)
  - hwdb/acpi-update: apply "ruff format" (RHEL-72703)
  - hwdb/ids_parser: apply "ruff format" and "ruff check --fix" (RHEL-72703)
  - hwdb/parse_hwdb: apply "ruff format" and "ruff check --fix" (RHEL-72703)
  - hwdb/ids_parser: make text_eol a proper function (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend rules (RHEL-72703)
  - hwdb/keyboard: fix match for for X+ Piccolo, again (RHEL-72703)
  - hwdb: add Infinix Y3 Max YL-613 touchpad properties (RHEL-72703)
  - hwdb: add Infinix Y3 Max YL-613 keys (RHEL-72703)
  - hwdb: Add Native Instruments Traktor MX2 (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: add Griffin PowerMate (RHEL-72703)
  - (hwdb) Update MSI Claw Entries - Add support for MSI Claw A8 BZ2EM. - Switch to using rn vice pn as MSI uses a unique pn for variants of the   same model. This prevents needing to update this file when a low volume   variant is released (I.E. Polar White AI 8+). (RHEL-72703)
  - Update 60-sensor.hwdb (RHEL-72703)
  - hwdb: fix match for MSI Claw entries (RHEL-72703)
  - Update 60-sensor.hwdb - Add support for Juno Tab 4 (Wifi) (RHEL-72703)
  - hwdb: Make Samsung download mode work out-of-the-box (RHEL-72703)
  - Add Elecom Huge Plus information for wired usb, wireless usb, and bluetooth (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - Steam deck lcd screen is a tablet LCD rotated in the kernel into portrait mode. (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - hwdb: Map Acer Nitro AN515-58 NitroSense button to prog1 (RHEL-72703)
  - hwdb: map Brazilian ThinkPad T14 Gen 1 slash key to KEY_RO (RHEL-72703)
  - hwbd: correctly map Bluetooth Key on MSI Modern 15 H AI C1MG laptop (RHEL-72703)
  - hwdb: add touchpad toggle mapping for MSI Katana GF66 12UD (RHEL-72703)
  - hwdb: map mic-mute key on Logitech K950 (Bluetooth) (RHEL-72703)
  - hwdb: Make Amlogic burn mode work out-of-box (RHEL-72703)
  - hwdb: add MSI Claw 8 EX AI+ CG3EM to keyboard hwdb list (RHEL-72703)
  - hwdb: sensor: Add Odys Windesk X10 accel mount matrix (RHEL-72703)
  - hwdb: classify PlayStation controller audio as controller form-factor (RHEL-72703)
  - hwdb: add numlock mapping for PATEN/Labtec USB Numpad (RHEL-72703)
  - hwdb: Add accelerometer matrix for OneXPlayer Super X (RHEL-72703)
  - hwdb: Fix Brazilian ABNT2 KEY_RO scancode for HP ProBook x360 435 G7 (#43151) (RHEL-72703)
  - hwdb: mark Microsoft Surface Type Cover touchpad as internal (#43262) (RHEL-72703)
  - hwdb: mark Adesso wireless keyboard trackball as trackball (#43263) (RHEL-72703)
  - hwdb: fix Lenovo B570e touchpad ABS ranges for edge scrolling (#43264) (RHEL-72703)
  - hwdb: mark ASUS ROG Flow Z13 (GZ302EA) touchpad as internal (RHEL-72703)
  - hwdb: Add accelerometer matrix for SHIFTbook 1 (RHEL-72703)
  - hwdb: Add HP EliteBook 845 G7 Fn+F11 airplane mode key mapping (RHEL-72703)
  - hwdb: Make Apple DebugUSB work out-of-box (RHEL-72703)
  - hwdb: mark Razer BlackShark V3 Pro as headset (RHEL-72703)
  - Update hwdb (RHEL-72703)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-11
changelog:
  - RHEL-170124 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
    via path traversal bypass


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.8-1
changelog:
  - Rebase to virt-v2v 2.11.8
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-1
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.11.9-2
changelog:
  - Rebase to virt-v2v 2.11.9
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.12.0-1
changelog:
  - Rebase to virt-v2v 2.12.0
    Synchronize spec file with Fedora
    resolves: RHEL-153361
  - Fixes incorrect driver location for Windows 2008 SP2
    resolves: RHEL-159888
  - Create sentinel file after all firstboot scripts have finished running
    resolves: RHEL-152939
  - Obey cgroups when computing SMP
    resolves: RHEL-152766
  - Fix encrypted Ubuntu guest fail to boot after conversion
    resolves: RHEL-137121, RHEL-178432
  - Stop using maxmem (xfs_repair -m option)
    resolves: RHEL-165677
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-170864
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-174312
  - Skip fsck after conversion for RHEL 7
    resolves: RHEL-191749
  - Add new --collect option to collect pre-conversion information
    resolves: RHEL-188772
  - Add disk boot-order to inspector and in-place XML output
    resolves: RHEL-184508
  - Allow conversion with immutable resolv.conf
    related: RHEL-178556
  - Add note about PowerShell ExecutionPolicy AllSigned (MTV-4424)
  - Retry qemu-guest-agent MSI installer on failure
    resolves: RHEL-186301
  - Fix online-disks firstboot in Powershell Constrained Language Mode
    resolves: RHEL-210639


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-2
changelog:
  - Fixing README file [RHEL-169757]
  - Resolves: RHEL-169757
    (Fix the README file: --announce-submounts is enabled by default)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182444


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-7
changelog:
  - CVE fix for: CVE-2026-55999, CVE-2026-56000
    Resolves: https://redhat.atlassian.net/browse/RHEL-191523
    Resolves: https://redhat.atlassian.net/browse/RHEL-191533


author: Jakub Martisko <jamartis@redhat.com> - 1:5.6.2-5
changelog:
  - Fix: a buffer overflow in lzma_index_append()
  - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environemnt)
  - Resolves: CVE-2026-34743


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


