# changelog

author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-55
changelog:
  - bz2223252 - filesystems mount and expire immediately
    - fix expire retry looping.
    - correct day in changelog entry for revision 53.
  - Resolves: rhbz#2223252


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-56
changelog:
  - RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: RHEL-13083


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-57
changelog:
  - RHEL-13084 - multi mount detection fails for share with blank+dash causing
    SEGV crash
    - fix multi-mount check.
  - Resolves: RHEL-13084


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-58
changelog:
  - RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-19731


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-59
changelog:
  - RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
  - Resolves: RHEL-69485
  - RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.
    - fix lookup search type in umount_subtree_mounts().
    - fix remount_active_mount() not remounting symlinks.
    - log when setting amd per-mount timeout.
    - update per-mount expire timeout on readmap.
    - clear per-mount timeout if not set.
  - Resolves: RHEL-71359
  - RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
    - fix submount shutdown race.
  - Resolves: RHEL-57466


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-60
changelog:
  - RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
    - fix deadlock in master_notify_submount().
  - Resolves: RHEL-77321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-61
changelog:
  - RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
    incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
    - handle sss special case getautomntbyname() error
  - Resolves: RHEL-32684


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-63
changelog:
  - RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
    - fix lock ordering deadlock in expire_cleanup().
    - change spec file %patchN to %patch -P N as required by rpm(8).
    - Fix compile error caused by function pointer types in cyrus-sasl module.
    - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
  - Resolves: RHEL-87031


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-64
changelog:
  - RHEL-81885 - autofs: segfault while dereferencing null mapent
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
    - fix changelog revision number of previous change.
  - Resolves: RHEL-81885


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-65
changelog:
  - RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
    - always recreate credential cache.
    - fix always recreate credential cache.
  -Resolves: RHEL-85615


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Joseph Marrero <jmarrero@redhat.com> - 0.6.3-1
changelog:
  - Rebase to 0.6.3 which is supported upstream
    This release also includes the fix for CVE-2024-42472
    Fixes: #RHEL-56797


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-82096)
  - improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
  - fix sourcedir reloading to not multiply sources (RHEL-95016)
  - switch from patchX to patch -P X


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 344-1
changelog:
  - Apply MSVSphere patches:
    * 0001-Added-support-GOST-and-PAM-GOST-profiles-for-crypto-.patch
    * 0002-Adds-MSVSphere-branding-directory.patch
    * 0003-Show-MSVSPHERE_PRETTY_NAME-instead-of-NAME-on-login-.patch
    * 0004-Show-MSVSPHERE_PRETTY_NAME-instead-of-NAME-for-docum.patch
    * 0005-Include-pkg-shell-module-translations-in-other-modul.patch
    * 0006-Show-MSVSPHERE_PRETTY_NAME-instead-of-PRETTY_NAME-in.patch
    * 0007-Disable-upstream-documentation-links.patch
    * 0008-Update-Russian-translation.patch
    * 0009-Change-chpasswd-to-passwd-to-support-PAM-crypto-algo.patch
    * 0010-Realmd-added-fully-qualified-names-option.patch
  - Added R: openssl-gost-engine


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-14
changelog:
  - Rename variables in get_range()
  - Step size out fo bound handling 
  - Fix range parsing
  - Resolves: RHEL-82795


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-33.1
changelog:
  - RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.192-3
changelog:
  - Enable debuginfod IMA verification
  - Add elfutils-0.192-fix-configure-conditional.patch
  - Add elfutils-0.192-skip-ima-test.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3.0-2
changelog:
  - fix intermittent test failures (RHEL-82109)
  - fix source-sh test with non-default manpath (RHEL-82109)


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Victor Evdokimov <viktor.evdokimov@softline.com> - 5.1.0-6.inferit
changelog:
  - Fixed the using null pointer in function set_breakpoint:
    using-null-pointer-in-set_breakpoint.patch
  - Fixed fd leak in function remap_std_file:
    not-closed-fd-in-remap_std_file.patch
  - Fixed fd leak in function do_readfile:
    not-closed-fd-in-do_readfile.patch
  - Fixed closing null file pointer in function do_writea:
    closed-null-file-pointer-in-do_writea.patch
  - Fixed using illegal array index in function value_info:
    illegal-array-index-in-value_info.patch


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-16.2
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94290
  - Resolves: RHEL-102845


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Andrea Claudi <aclaudi@redhat.com> - 1.2.2-1.el9
changelog:
  - New version 1.2.2 (Andrea Claudi) [RHEL-77280]
  - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-604.el9]
changelog:
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99399]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99399]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99399]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99399]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99399]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99399]
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103029] {CVE-2025-38124}
  - scsi: storvsc: Increase the timeouts to storvsc_timeout JIRA: https://issues.redhat.com/browse/RHEL-100669 (Dexuan Cui)
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-105066]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-105066]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-105064]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-105064]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-105064]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-105064]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-105064]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-105064]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-105064]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-105064]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103260] {CVE-2025-38250}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95607]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103158] {CVE-2025-38159}
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103222] {CVE-2025-38292}
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76568]
  - bnxt_en: delay pci_alloc_irq_vectors() in the AER path (Shruti Parab) [RHEL-76568]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76568]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76568]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76568]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76568]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76568]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76568]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76568]
  - eth: bnxt: update header sizing defaults (Shruti Parab) [RHEL-76568]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76568]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76568]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76568]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76568]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76568]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76568]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76568]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update bnxt.rst devlink documentation (Shruti Parab) [RHEL-76568]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Limit resolving a frequency to policy min/max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83803]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83803]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83803]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83803]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: Enabled CPUFREQ_VIRT (Mark Langsdorf) [RHEL-83803]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Use NSEC_PER_MSEC for deadline task (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix the cacography in powernv-cpufreq.c (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix warning on unused of_device_id tables for !CONFIG_OF (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Drop CONFIG_ARM and CONFIG_ARM64 dependency on Arm drivers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Drop asm includes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Add explicit io.h include for readl/writel_relaxed (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Use of_property_for_each_u32() instead of open coding (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: make ACPI_CPPC_CPUFREQ generic (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use of_property_present() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powerpc: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: fix build warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Make cpufreq_driver->exit() return void (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pcc: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: nforce2: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Allow drivers to advertise boost enabled (Mark Langsdorf) [RHEL-83803]
  - cpufreq: make cpufreq_boost_enabled() return bool (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: add missing MODULE_DEVICE_TABLE entry for stih418 (Mark Langsdorf) [RHEL-83803]
  - cpufreq: simplify boolean parsing with kstrtobool in store function (Mark Langsdorf) [RHEL-83803]
  - cpufreq: update to sysfs_emit() for safer buffer handling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: fix memory leaks in probe error paths (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: add support for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - soc: qcom: socinfo: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - dt-bindings: arm: qcom,ids: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - powerpc: rename SPRN_HID2 define to SPRN_HID2_750FX (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix up printing large CPU numbers and frequency values (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ti: Implement scope-based cleanup in ti_cpufreq_match_node() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: Blocklist Allwinner H616/618 SoCs (Mark Langsdorf) [RHEL-83803]
  - cpupfreq: tegra124: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use a smaller freq for the policy->max when verify (Mark Langsdorf) [RHEL-83803]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-92556]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-10019]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-10019]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-79685]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-79685]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-79685]
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79685] {CVE-2025-38053}
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79685 RHEL-93924]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79685]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-66157 RHEL-79685 RHEL-82204]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-79685 RHEL-93924] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79685] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79685] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79685]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79685]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79685]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79685]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79685 RHEL-82469] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79685]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79685]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79685]
  - i2c: designware: add a new bit check for IC_CON control (John Allen) [RHEL-78660]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-47406 RHEL-47452]
  - perf/x86/intel: Add PMU support for Clearwater Forest (Michael Petlan) [RHEL-45093 RHEL-47454]
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106622] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106083] {CVE-2025-38471}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104380]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104380]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104380]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104380]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104380]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104380]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104380]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104380]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104380]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104380]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104380]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104380]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104380]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104380]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104380]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104380]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104380]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-605.el9]
changelog:
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64457]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64457]
  - mux: Add support for reading mux state from consumer DT node (Radu Rendec) [RHEL-105629]
  - mux: add support for delay after muxing (Radu Rendec) [RHEL-105629]
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-87983]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-87983]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-87983]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-87983]
  - can: tcan4x5x: fix reset gpio usage during probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Radu Rendec) [RHEL-90130]
  - can: m_can: Limit coalescing to peripheral instances (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset cached active_interrupts on start (Radu Rendec) [RHEL-90130]
  - can: m_can: disable_all_interrupts, not clear active_interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Do not cancel timer from within timer (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove m_can_rx_peripheral indirection (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove coalesing disable in isr during suspend (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset coalescing during suspend/resume (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_get_berr_counter(): use CAN_BUS_OFF_THRESHOLD instead of open coding it (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): use cpu_to_le32() to assign mode (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add support for Leaf v3 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: support resuming from rx interrupt signal (Radu Rendec) [RHEL-90130]
  - can: m_can: allow keeping the transceiver running in suspend (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Document the wakeup-source flag (Radu Rendec) [RHEL-90130]
  - can: m_can: remove redundant check for pm_clock_support (Radu Rendec) [RHEL-90130]
  - can: netlink: Fix TDCO calculation using the old data bittiming (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit submission coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement BQL (Radu Rendec) [RHEL-90130]
  - can: m_can: Use tx_fifo_in_flight for netif_queue control (Radu Rendec) [RHEL-90130]
  - can: m_can: Introduce a tx_fifo_in_flight counter (Radu Rendec) [RHEL-90130]
  - can: m_can: Use the workqueue as queue (Radu Rendec) [RHEL-90130]
  - can: m_can: Cache tx putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Use u32 for putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Add tx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Add rx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement receive coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Write transmit header and data in one transaction (Radu Rendec) [RHEL-90130]
  - can: m_can: Move hrtimer init to m_can_class_register (Radu Rendec) [RHEL-90130]
  - can: m_can: Start/Cancel polling timer together with interrupts (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Fix id2_register for tcan4553 (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): move debug message and stats after successful restart (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): reverse logic to remove need for goto (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: m_can: change from additional- to unevaluatedProperties (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add error messages in probe (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add support for tcan4552/4553 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Rename ID registers to match datasheet (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Check size of mram configuration (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Remove reserved register 0x814 from writable table (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Add tcan4552 and tcan4553 variants (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert to NAPI/rx-offload to avoid OoO reception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_disconnect(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_destroy_candev(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): don't complain about failed device reset during ndo_stop (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_start_xmit(), gs_can_open(): clean up printouts in error path (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of stats (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of netdev (Radu Rendec) [RHEL-90130]
  - can: gs_usb: uniformly use "parent" as variable name for struct gs_usb (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_set_timestamp(): remove return statements form void function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_probe(): align block comment (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove leading space from goto labels (Radu Rendec) [RHEL-90130]
  - can: Explicitly include correct DT includes, part 2 (Radu Rendec) [RHEL-90130]
  - can: peak_usb: remove unused/legacy peak_usb_netif_rx() function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Radu Rendec) [RHEL-90130]
  - can: m_can: Add hrtimer to generate software interrupt (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Remove interrupt properties for MCAN (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout (Radu Rendec) [RHEL-90130]
  - can: gs_usb: fix time stamp counter initialization (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): improve error handling (Radu Rendec) [RHEL-90130]
  - can: rx-offload: fix coding style (Radu Rendec) [RHEL-90130]
  - can: m_can: fix coding style (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add len8_dlc support (Radu Rendec) [RHEL-90130]
  - can: m_can: Convert to platform remove callback returning void (Radu Rendec) [RHEL-90130]
  - can: dev: fix missing CAN XL support in can_put_echo_skb() (Radu Rendec) [RHEL-90130]
  - kvaser_usb: convert USB IDs to hexadecimal values (Radu Rendec) [RHEL-90130]
  - can: m_can: Keep interrupts enabled during peripheral read (Radu Rendec) [RHEL-90130]
  - can: m_can: Disable unused interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove double interrupt enable (Radu Rendec) [RHEL-90130]
  - can: m_can: Always acknowledge all interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove repeated check for is_peripheral (Radu Rendec) [RHEL-90130]
  - can: bittiming: can_fixup_bittiming(): set effective tq (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove gs_can::iface (Radu Rendec) [RHEL-90130]
  - can: m_can: Add check for devm_clk_get (Radu Rendec) [RHEL-90130]
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Radu Rendec) [RHEL-90130 RHEL-90138] {CVE-2022-49024}
  - can: kvaser_usb: Fix possible completions during init_completion (Radu Rendec) [RHEL-90130]
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Radu Rendec) [RHEL-90130]
  - can: m_can: use consistent indention (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add support for reading error counters (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_GET_STATE (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add ability to enable / disable berr reporting (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_BERR_REPORTING (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): merge setting of timestamp flags and init (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): sort checks for ctrlmode (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): allow loopback and listen only at the same time (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): set netdev->dev_id (Radu Rendec) [RHEL-90130]
  - can: gs_usb: mention candleLight as supported device (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_handle_bus_errors(): add support for handling DLEC error on CAN-FD frames (Radu Rendec) [RHEL-90130]
  - can: m_can: is_lec_err(): clean up LEC error handling (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Remove -Warray-bounds exception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove dma allocations (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add switchable termination support (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): clean up error handling (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert from usb_control_msg() to usb_control_msg_{send,recv}() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): rename variable holding struct gs_can pointer to dev (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: kvaser_usb_hydra: Use kzalloc for allocating only one element (Radu Rendec) [RHEL-90130]
  - can: rx-offload: can_rx_offload_init_queue(): fix typo (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: add binding information for mcp251863 (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: fix indention of table in bosch,mram-cfg description (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: list Chandrasekar Ramakrishnan as maintainer (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Radu Rendec) [RHEL-90130]
  - dt-bindings: can-controller: add support for termination-gpios (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document power-domains property (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document transceiver implementation as phy (Radu Rendec) [RHEL-90130]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-95318]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-95318]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-95318]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print the seed for the guest pRNG iff it has changed (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add global snapshot of kvm_is_forced_emulation_enabled() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Provide an API for getting a random bool from an RNG (Maxim Levitsky) [RHEL-95318]
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-95318]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-95318]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-95318]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-95318]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-95318]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-95318]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-95318]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-95318]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-95318]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-95318]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-95318]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-95318]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-15711]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-15711]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-15711]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-15711]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-15711]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-15711]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-15711]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-15711]
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-104899]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Pavel Reichl) [RHEL-101639]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83572]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83572]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83572]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83572]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83572]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83572]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83572]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83572]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83572]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83572]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83572]
  - iavf: switch to Page Pool (Michal Schmidt) [RHEL-83572]
  - iavf: pack iavf_ring more efficiently (Michal Schmidt) [RHEL-83572]
  - iavf: drop page splitting and recycling (Michal Schmidt) [RHEL-83572]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96295]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (Robert Foss) [RHEL-91332]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (Robert Foss) [RHEL-91332]
  - redhat: add drm_atomic_state_test to mod-internal.list (Robert Foss) [RHEL-91332]
  - accel/ivpu: Don't convert symbol namespace to string literal (Robert Foss) [RHEL-91332]
  - xe: Don't select CONFIG_DRM_GPUSVM (Robert Foss) [RHEL-91332]
  - drm: xe: Include linux/nospec.h (Robert Foss) [RHEL-91332]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Add cgroups implementation" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux" (Robert Foss) [RHEL-91332]
  - Revert "drm/i915: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amd/display: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/sysfs: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - drm: Move for_each_if() to util_macros.h for wider use (Robert Foss) [RHEL-91332]
  - redhat/configs: Add new configs from drm 6.15 backport (Robert Foss) [RHEL-91332]
  - Merge DRM changes from upstream v6.14..v6.15 (Robert Foss) [RHEL-91332]
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104094] {CVE-2025-22058}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-606.el9]
changelog:
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104271] {CVE-2025-38211}
  - NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-90990]
  - nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-90990]
  - Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-90990]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-47448]
  - igc: fix lock order in igc_ptp_reset (Corinna Vinschen) [RHEL-83575]
  - igc: set the RX packet buffer size for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing RX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: optimize TX packet buffer utilization for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing TX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: rename I225_RXPBSIZE_DEFAULT and I225_TXPBSIZE_DEFAULT (Corinna Vinschen) [RHEL-83575]
  - igc: rename xdp_get_tx_ring() for non-xdp usage (Corinna Vinschen) [RHEL-83575]
  - igc: enable HW vlan tag insertion/stripping by default (Corinna Vinschen) [RHEL-83575]
  - igc: add lock preventing multiple simultaneous PTM transactions (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: cleanup PTP module if probe fails (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: move ktime snapshot into PTM retry loop (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: increase wait time before retrying PTM (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: fix PTM cycle trigger logic (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83575]
  - igc: Fix XSK queue NAPI ID mapping (Corinna Vinschen) [RHEL-83575]
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Corinna Vinschen) [RHEL-83575]
  - igc: Fix HW RX timestamp when passed by ZC XDP (Corinna Vinschen) [RHEL-83575]
  - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process (Corinna Vinschen) [RHEL-83575]
  - igc: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Fix passing 0 to ERR_PTR in igc_xdp_run_prog() (Corinna Vinschen) [RHEL-83575]
  - igc: Allow hot-swapping XDP program (Corinna Vinschen) [RHEL-83575]
  - igc: return early when failing to read EECD register (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pcie_cap_reg (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pci_cfg wrappers (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_acquire/release_nvm (Corinna Vinschen) [RHEL-83575]
  - igc: remove autoneg parameter from igc_mac_info (Corinna Vinschen) [RHEL-83575]
  - igc: fix build errors for PTP (Corinna Vinschen) [RHEL-83575]
  - ixgbe: add support for FW rollback mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 implementation of FW recovery mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add FW API version check (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add support for devlink reload (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add device flash update via devlink (Corinna Vinschen) [RHEL-99401]
  - ixgbe: extend .info_get() with stored versions (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions getting PBA and FW ver info (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add .info_get extension specific for E610 devices (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the netlist version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the OROM version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions for acquiring flash data (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add handler for devlink .info_get() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add initial devlink support (Corinna Vinschen) [RHEL-99401]
  - ixgbe: wrap netdev_priv() usage (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Corinna Vinschen) [RHEL-99401]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-86539 RHEL-99401]
  - ixgbe: add support for thermal sensor event reception (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add PTP support for E610 device (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Fix possible skb NULL pointer dereference (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Fix passing 0 to ERR_PTR in ixgbevf_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix passing 0 to ERR_PTR in ixgbe_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Remove unused ixgbevf_hv_mbx_ops (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Correct BASE-BX10 compliance code (Corinna Vinschen) [RHEL-99401]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Break include dependency cycle (Corinna Vinschen) [RHEL-99401]
  - arch: x86: add IPC mailbox accessor function and add SoC register access (CKI Backport Bot) [RHEL-107008]
  - ASoC: SDCA: Allow read-only controls to be deferrable (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Fixup some kernel doc errors (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Add missing default in switch in entity_pde_event() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Update memory allocations to zero initialise (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Jaroslav Kysela) [RHEL-101627]
  - sof-client-ipc-flood-test: don't mess with ->d_name (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: compress_offload: tighten ioctl command number checks (Jaroslav Kysela) [RHEL-101627]
  - soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38486}
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt721-sdca: fix boost gain calculation error (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38438}
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38454}
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-acpi: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: update quirk data for HP Victus (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Don't allow changing the DMA mode during operations (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38249}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Ignore unsol events for cards being shut down (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: add check for status update registers (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for clearing command status register (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: ps: fix for soundwire failures during hibernation exit sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for handling slave alerts after link is down (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38423}
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Jaroslav Kysela) [RHEL-101627]
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38307}
  - ASoC: Intel: avs: Relocate DSP status registers (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Read HW capabilities when possible (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix PPLCxFMT calculation (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: PCM operations for LNL-based platforms (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Allow to fetch hlink by ID (Jaroslav Kysela) [RHEL-101627]
  - soundwire: only compute port params in specific stream states (Jaroslav Kysela) [RHEL-101627]
  - ALSA: core: fix up bus match const issues. (Jaroslav Kysela) [RHEL-101627]
  - ASoC: apple: mca: Constrain channels according to TDM mask (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: amd: add missing acp descriptor field (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Enable main IRQs (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Reinit cache on part reset (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: hda: Fix RPM usage count underflow (Jaroslav Kysela) [RHEL-101627]
  - ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108151] {CVE-2025-38417}
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge) [RHEL-98540]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107693]
  - cpuidle: Init cpuidle only for present CPUs (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after get_typical_interval() changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after previous changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Avoid discarding useful information (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Eliminate outliers on both ends of the sample set (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Tweak threshold use in get_typical_interval() (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Use one loop for average and variance computations (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Drop a redundant local variable (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Add trace for PSCI domain idle (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Activate GENPD_FLAG_ACTIVE_WAKEUP with OSI (Mark Langsdorf) [RHEL-87863]
  - powerpc/machdep: Drop include of dma-mapping.h (Mark Langsdorf) [RHEL-87863]
  - cpuidle: Correct some typos in comments (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Remove iowait influence (Mark Langsdorf) [RHEL-87863]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41080]
  - net: add helpers for EEE configuration (CKI Backport Bot) [RHEL-107009]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-607.el9]
changelog:
  - drm/vmwgfx: Fix guests running with TDX/SEV (Jocelyn Falempe) [RHEL-108036]
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-99742]
  - Squashfs: sanity check symbolic link size (CKI Backport Bot) [RHEL-59303] {CVE-2024-46744}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101247] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101283] {CVE-2025-38084}
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101283]
  - net/mlx5: Reset bw_share field when changing a node's parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Fix potential deadlock in MR deregistration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-94893]
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, Fix error handling for enabling roce (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-37888}
  - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx5) (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-22086}
  - RDMA/mlx5: Fix page_size variable overflow (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83386 RHEL-99321] {CVE-2025-22091}
  - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix cache entry update on dereg error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix MR cache initialization error flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support optional-counters binding for QPs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Reorder capability check last (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Start health poll after enable hca (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, reload representors on LAG creation failure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Don't offload CT commit if it's the last action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update pfnum retrieval for devlink port attributes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fw reset, check bridge accessibility at earlier stage (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, use port selection tables when available (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use right API to free bitmap memory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove NULL check before dev_{put, hold} (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Get counter group size by FW capability (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Access PHY layer counter group as other counter groups (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Ensure each counter group uses its PCAM bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, log the unsupported mask in definer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use list_move() instead of del/add (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove unused code for alias flow tables (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for setting parent of nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Preserve rate settings when creating a rate node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename devlink rate parent set function for leaf nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest flow sampler HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for flow meters HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add API for sharing HWS action by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add IFC bits for PPCNT recovery counters group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Query ADV_RDMA capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Limit non-privileged commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Allow the throttle mechanism to be more dynamic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add RDMA_CTRL HW capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid unnecessary use of comma operator (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Properly match IPsec subnet addresses (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate address related variables to be in struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add trust lockdown error to health syndrome print function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose crr in health buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Log health buffer data on any syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid report two health errors on same syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove newline at the end of a netlink error message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add new health syndrome error and crr bit offset (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Symmetric OR-XOR RSS hash control (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move IPSec policy check after decryption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add helper function to update IPSec default destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate extended link modes request from link modes type selection (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change eth_proto parameter naming (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Introduce ptys2ethtool_process_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Refactor ptys2ethtool_adver_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, correct config option description (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sensor name to temperature event message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Apply rate-limiting to high temperature warning (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move RQs diagnose to a dedicated function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose ICM consumption per function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: set the tx_queue_len for pfifo_fast (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove stray semicolon in LAG port selection table creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support FEC settings for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for 200Gbps per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add devcom component for the clock shared by functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Remove unused mlx5dr_domain_sync (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21970}
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, Rightsize bwc matcher priority (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, use the right action structs for STEv3 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: handle errors in mlx5_chains_create_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21975}
  - net/mlx5: Fill out devlink dev info only for PFs (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-93397]
  - net/mlx5: IRQ, Fix null string in debug print (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restore missing trace event when enabling vport QoS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix vport QoS cleanup on error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21882}
  - RDMA/mlx5: Fix bind QP error cleanup flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix AH static rate parsing (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21892}
  - net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21717}
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21732}
  - RDMA/mlx5: Fix indirect mkey ODP page count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix link status down event for MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle link status event only for LAG device (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Extend ODP statistics with operation count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fix unintentional sign extension on shift of dest_attr->vport.vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Offload connections with hardware steering rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Make mlx5_ct_fs_smfs_ct_validate_flow_rule reusable (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Add initial support for Hardware Steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, rework the check if matcher size can be increased (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: SHAMPO: Introduce new SHAMPO specific HCA caps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - support through bigger action RTC (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - remove the use of dual RTCs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS to steering mode options (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS get capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, set create match definer to not supported by HWS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest vport HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS fte API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add dest table cache (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, manage flow counters HWS action sharing by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS modify header API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS packet reformat API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS actions pool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow group API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow table API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS root namespace functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update TX ESN context for IPSec hardware offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: use do_aux_work for PHC overflow checks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, set timeout on polling for completion (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, support flow sampler destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use the right size when writing arg data (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, handle returned error value in pool alloc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21800}
  - net/mlx5: HWS, separate SQ that HWS uses from the usual traffic SQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, num_of_rules counter on matcher should be atomic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, reduce memory consumption of a matcher struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove wrong deletion of the miss table list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, change error flow on matcher disconnect (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21751}
  - net/mlx5: HWS, add error message on failure to move rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, simplify allocations as we support only FDB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, denote how refcounts are protected (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove implementation of unused FW commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove the use of duplicated structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, Add support for RDMA RX steering over IB link layer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove PTM support log message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, add support for ConnectX-8 steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, expand SWS STE callbacks and consolidate common structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, do not initialize native API queues (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, no need to expose mlx5hws_send_queues_open/close (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, retry insertion to hash table on EBUSY (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add mlx5_fs_pool API (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add counter object to flow destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Support LAG over Multi-Host NICs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Refactor lag logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add device cap abs_native_port_num (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add ifc support for cross-esw scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for new scheduling elements (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add ConnectX-8 device to ifc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: ifc: Reorganize mlx5_ifc_flow_table_context_bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always start IPsec sequence number from 1 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21674}
  - net/mlx5: Clear port select structure when fail to create (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21675}
  - net/mlx5: SF, Fix add port error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix a lockdep warning as part of the write combining test (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix RDMA TX steering prio (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix variable not being completed when function returns (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21662}
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-57801}
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enable multiplane mode only when it is supported (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, prevent potential error pointer dereference (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-56660}
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add implementation for ufile_hw_cleanup device operation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support querying per-plane IB PortCounters (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support OOO RX WQE consumption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce data placement ordering bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Rework header allocation loop (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Drop info array (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Change frag page setup order during allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Fix page_index calculation inconsistency (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Simplify UMR allocation for headers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Make vport QoS enablement more flexible for future extensions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Integrate esw_qos_vport_enable logic into rate operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize scheduling element operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor scheduling element configuration bitmasks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize max_rate and min_rate setting for nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS normalization by removing error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, refactor eswitch mode change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: deduplicate {mlx5_,}eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: relax memory barrier in eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: Schedule EQ comp tasklet only if necessary (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: do not create xdp_redirect for non-uplink rep (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: move XDP_REDIRECT sq to dynamic allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, renamed the files in accordance with naming convention (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rework esw qos domain init and cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DPLL, Add clock quality level op implementation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: simplify EQ interrupt polling logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: fix typo in "mlx5_cqwq_get_cqe_enahnced_comp" (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on ring size change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on MTU change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: unique names for per device caches (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename modify header struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename packet reformat struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Only create VEPA flow table when in VEPA mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sync reset drop mode support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize QoS operations for nodes and vports (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS scheduling element configuration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove vport QoS enabled flag (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport QoS to use scheduling node structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport scheduling element creation function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node struct and rename group terminology to node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename vport QoS group reference to parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restrict domain list insertion to root TSAR ancestors (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add parent group support in rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node type to rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor QoS group scheduling element creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support check for TSAR types in QoS scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Unify QoS element type checks across NIC and E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor locking to a qos domain mutex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store rate groups in a qos domain (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename rate group 'list' as 'parent_entry' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add an explicit 'dev' to vport trace calls (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store the eswitch in a mlx5_esw_rate_group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Drop 'esw' param from vport qos functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Always create group0 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Maintain rate group vport members in a list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor and document bw_share calculation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Consistently name vport vars as 'vport' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename vport 'tsar' into 'sched_elem'. (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Flesh out element_attributes in mlx5_ifc.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Don't maintain a counter count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - perf script: perf script tests fails with segfault (Jakub Brnak) [RHEL-71129]
  - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() (Jerome Marchand) [RHEL-101938]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx4) (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: select PAGE_POOL (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: use the page pool for Rx buffers (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: remove the local XDP fast-recycling ring (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: don't try to complete XDP frames in netpoll (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: create a page pool for Rx (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - mlx4: Remove unused functions (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Support report_port_event() ops (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use DMA iterator to write MTT (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use ib_umem_find_best_pgsz() to calculate MTT size (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-109507]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109507]
  - smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix null-ptr-deref by static initializing global lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-109507]
  - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-109507]
  - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix creating symlinks under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: default to nonativesocket under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: set symlink type as native for POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb3 client: add way to show directory leases for improved debugging (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing iocharset mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing domain mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass2 mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing user mount option (Paulo Alcantara) [RHEL-109507]
  - cifs: Add support for creating reparse points over SMB1 (Paulo Alcantara) [RHEL-109507]
  - cifs: Do not query WSL EAs for native SMB symlink (Paulo Alcantara) [RHEL-109507]
  - cifs: Optimize CIFSFindFirst() response when not searching (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix calling CIFSFindFirst() for root path without msearch (Paulo Alcantara) [RHEL-109507]
  - cifs: add new field to track the last access time of cfid (Paulo Alcantara) [RHEL-109507]
  - smb: change return type of cached_dir_lease_break() to bool (Paulo Alcantara) [RHEL-109507]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109507]
  - smb: invalidate and close cached directory when creating child entries (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-109507]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-109507]
  - net: openvswitch: allow providing upcall pid for the 'execute' command (Aaron Conole) [RHEL-84596]
  - net: netlink: add nla_get_*_default() accessors (Aaron Conole) [RHEL-84596]
  - benet: fix BUG when creating VFs (Michal Schmidt) [RHEL-106952]
  - eth: bnxt: fix missing ring index trim on error path (Michal Schmidt) [RHEL-107291] {CVE-2025-37873}
  - treewide: Switch/rename to timer_delete[_sync]() (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix memory leak in queue reset (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Michal Schmidt) [RHEL-107291] {CVE-2025-21973}
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Michal Schmidt) [RHEL-107291] {CVE-2025-21960}
  - eth: bnxt: fix out-of-range access of vnic_info array (Michal Schmidt) [RHEL-107291] {CVE-2025-22112}
  - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Michal Schmidt) [RHEL-107291] {CVE-2025-21974}
  - eth: bnxt: fix truesize for mb-xdp-pass case (Michal Schmidt) [RHEL-107291 RHEL-87499] {CVE-2025-21961}
  - net: ethtool: populate the default HDS params in the core (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix string truncation warning in FW version (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Michal Schmidt) [RHEL-107291] {CVE-2025-21682}
  - net: bnxt: use ethtool string helpers (Michal Schmidt) [RHEL-107291]
  - eth: Fix typo 'accelaration'. 'exprienced' and 'rewritting' (bnxt) (Michal Schmidt) [RHEL-107291]
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-102433]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-102433]
  - drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value (Robert Foss) [RHEL-75952]
  - drm/amd/display: Export full brightness range to userspace (Robert Foss) [RHEL-75952]
  - drm/amd/display: Optimize custom brightness curve (Robert Foss) [RHEL-75952]
  - drm/amd/display: Only read ACPI backlight caps once (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix default DC and AC levels (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add debugging message for brightness caps (Robert Foss) [RHEL-75952]
  - drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add early 8b/10b channel equalization test pattern sequence (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add missing locking in helper functions (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix mpv playback corruption on weston (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add dc cap for dp tunneling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Robert Foss) [RHEL-75952]
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (Robert Foss) [RHEL-75952]
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Robert Foss) [RHEL-75952]
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Robert Foss) [RHEL-75952]
  - drm/xe: Fix early wedge on GuC load failure (Robert Foss) [RHEL-75952]
  - drm/xe: Fix taking invalid lock on wedge (Robert Foss) [RHEL-75952]
  - drm/xe: Fix memset on iomem (Robert Foss) [RHEL-75952]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add kicker device detection (Robert Foss) [RHEL-75952]
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix RMCM programming seq errors (Robert Foss) [RHEL-75952]
  - drm/xe/guc_submit: add back fix (Robert Foss) [RHEL-75952]
  - drm/xe/sched: stop re-submitting signalled jobs (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move rebind_work init earlier (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Robert Foss) [RHEL-75952]
  - drm/amdgpu: disable workload profile switching when OD is enabled (Robert Foss) [RHEL-75952]
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add null pointer check for get_first_active_display() (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (Robert Foss) [RHEL-75952]
  - drm/i915/ptl: Use everywhere the correct DDI port clock select mask (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Fix race in GWS queue scheduling (Robert Foss) [RHEL-75952]
  - drm/udl: Unregister device before cleaning up on disconnect (Robert Foss) [RHEL-75952]
  - drm/tegra: Fix a possible null pointer dereference (Robert Foss) [RHEL-75952]
  - drm/tegra: Assign plane type before registration (Robert Foss) [RHEL-75952]
  - drm/simpledrm: Do not upcast in release helpers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Tianma TM070JDHG34-00: add delays (Robert Foss) [RHEL-75952]
  - drm/cirrus-qemu: Fix pitch programming (Robert Foss) [RHEL-75952]
  - drm/ast: Fix comment on modeset lock (Robert Foss) [RHEL-75952]
  - drm/xe: Process deferred GGTT node removals on device unwind (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Robert Foss) [RHEL-75952]
  - drm/i915: fix build error some more (Robert Foss) [RHEL-75952]
  - drm/amd: Adjust output for discovery error handling (Robert Foss) [RHEL-75952]
  - drm: writeback: Fix drm_writeback_connector_cleanup signature (Robert Foss) [RHEL-75952]
  - drm/xe: move DPT l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/xe: Move DSB l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/i915/snps_hdmi_pll: Fix 64-bit divisor truncation by using div64_u64 (Robert Foss) [RHEL-75952]
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add compatibility checks for set_hw_resource_1 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add sanity checks for drm_edid_raw() (Robert Foss) [RHEL-75952]
  - drm/i915/display: Add check for alloc_ordered_workqueue() and alloc_workqueue() (Robert Foss) [RHEL-75952]
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Robert Foss) [RHEL-75952]
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Robert Foss) [RHEL-75952]
  - drm/scheduler: signal scheduled fence when kill job (Robert Foss) [RHEL-75952]
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn2.5: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn3: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn4: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn5.0.1: read back register after written (Robert Foss) [RHEL-75952]
  - amd/amdkfd: fix a kfd_process ref leak (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401" (Robert Foss) [RHEL-75952]
  - drm/xe/bmg: Update Wa_16023588340 (Robert Foss) [RHEL-75952]
  - drm/amdkfd: move SDMA queue reset capability check to node_show (Robert Foss) [RHEL-75952]
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Robert Foss) [RHEL-75952]
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Robert Foss) [RHEL-75952]
  - drm/ssd130x: fix ssd132x_clear_screen() columns (Robert Foss) [RHEL-75952]
  - drm/xe/svm: Fix regression disallowing 64K SVM migration (Robert Foss) [RHEL-75952]
  - drm/appletbdrm: Make appletbdrm depend on X86 (Robert Foss) [RHEL-75952]
  - udmabuf: use sgtable-based scatterlist wrappers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry (Robert Foss) [RHEL-75952]
  - drm/xe/uc: Remove static from loop variable (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Robert Foss) [RHEL-75952]
  - drm/amd/display: Restructure DMI quirks (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct prefetch calculation (Robert Foss) [RHEL-75952]
  - drm/amd/pm: Reset SMU v13.0.x custom settings (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix VUpdate offset calculations for dcn401 (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx9: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable EASF narrow filter sharpening (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx8: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Disallow partition query during reset (Robert Foss) [RHEL-75952]
  - drm/amdgpu: fix MES GFX mask (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct SSC enable detection for DCN351 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Update IPS sequential_ono requirement checks (Robert Foss) [RHEL-75952]
  - drm/xe/vf: Fix guc_info debugfs for VFs (Robert Foss) [RHEL-75952]
  - drm/xe: Use copy_from_user() instead of __copy_from_user() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx7: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk() (Robert Foss) [RHEL-75952]
  - drm/amd/display: fix zero value for APU watermark_c (Robert Foss) [RHEL-75952]
  - drm: panel-orientation-quirks: Add ZOTAC Gaming Zone (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Do Not Consider DSC if Valid Config Not Found (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add basic validation for RAS header (Robert Foss) [RHEL-75952]
  - drm/amd/display: Skip to enable dsc if it has been off (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Robert Foss) [RHEL-75952]
  - drm/nouveau/gsp: fix rm shutdown wait condition (Robert Foss) [RHEL-75952]
  - drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (Robert Foss) [RHEL-75952]
  - drm/nouveau: fix hibernate on disabled GPU (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx11: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: change the gpiod_set_value API (Robert Foss) [RHEL-75952]
  - drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler() (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: enable HPD interrupts (Robert Foss) [RHEL-75952]
  - drm/panel/sharp-ls043t1le01: Use _multi variants (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Robert Foss) [RHEL-75952]
  - drm/xe: Fix CFI violation when accessing sysfs files (Robert Foss) [RHEL-75952]
  - drm/amd/display: DCN32 null data check (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix API status offset for MES queue reset (Robert Foss) [RHEL-75952]
  - drm/dp: add option to disable zero sized address only transactions. (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx6: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable DPP RCG before DPP CLK enable (Robert Foss) [RHEL-75952]
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Robert Foss) [RHEL-75952]
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use firmware names from upstream repo (Robert Foss) [RHEL-75952]
  - accel/ivpu: Improve buffer object logging (Robert Foss) [RHEL-75952]
  - drm/xe/lrc: Use a temporary buffer for WA BB (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Clarify PXP queue creation behavior if PXP is not ready (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Use the correct define in the set_property_funcs array (Robert Foss) [RHEL-75952]
  - drm/xe: Rework eviction rejection of bound external bos (Robert Foss) [RHEL-75952]
  - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move xe_svm_init() earlier (Robert Foss) [RHEL-75952]
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Robert Foss) [RHEL-75952]
  - drm/i915/display: Fix u32 overflow in SNPS PHY HDMI PLL setup (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10 (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Robert Foss) [RHEL-75952]
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Fix clk-disable removal (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove CONFIG_PM related check in analogix_dp_bind()/analogix_dp_unbind() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Reorder Doorbell Unregister and Command Queue Destruction (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove the unnecessary calls to clk_disable_unprepare() during probing (Robert Foss) [RHEL-75952]
  - drm/connector: only call HDMI audio helper plugged cb if non-null (Robert Foss) [RHEL-75952]
  - drm/panic: Use a decimal fifo to avoid u64 by u64 divide (Robert Foss) [RHEL-75952]
  - drm/panic: clean Clippy warning (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Make creation of SLPC debugfs files conditional (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Don't expose GuC privileged debugfs files if VF (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Refactor GuC debugfs initialization (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Use the correct connector while computing the link BPP limit on MST (Robert Foss) [RHEL-75952]
  - drm/amd/display: Don't check for NULL divisor in fixpt code (Robert Foss) [RHEL-75952]
  - drm/tegra: rgb: Fix the unbound reference count (Robert Foss) [RHEL-75952]
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Robert Foss) [RHEL-75952]
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Robert Foss) [RHEL-75952]
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Robert Foss) [RHEL-75952]
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x GPUs (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix the panthor_gpu_coherency_init() error path (Robert Foss) [RHEL-75952]
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Robert Foss) [RHEL-75952]
  - drm/panthor: Call panthor_gpu_coherency_init() after PM resume() (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Robert Foss) [RHEL-75952]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Robert Foss) [RHEL-75952]
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Fix dumb buffer leak (Robert Foss) [RHEL-75952]
  - drm/ci: fix merge request rules (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add seqno waiter for sync_files (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Robert Foss) [RHEL-75952]
  - drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8 (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: pause the workload setting in dm" (Robert Foss) [RHEL-75952]
  - audit,module: restore audit logging in load failure case (Richard Guy Briggs) [RHEL-52839]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian) [RHEL-89165]
  - Enable the gs_usb CAN bus driver (Radu Rendec) [RHEL-83402]
  - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-103348]
  - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-103348]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-608.el9]
changelog:
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (CKI Backport Bot) [RHEL-108385]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108264]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108264]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72765]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72765]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72765]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Explicitly check for error code (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: correct tpm_tis_flags enumeration values (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Request threaded interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm: Implement usage counter for locality (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: do not check for the active locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Move interrupt mask checks into own function (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Only handle supported interrupts (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing interrupt registers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Do not skip reset of original interrupt vector (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (Štěpán Horáček) [RHEL-72765]
  - redhat/configs: sync CONFIG_SND_HDA_ACPI with ARK (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Make driver's match data const static (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Use SYSTEM_SLEEP_PM_OPS() (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: Add missing NVIDIA HDA codec IDs (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda - Add new driver for HDA controllers listed via (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda/tegra: Add Tegra264 support (Marcin Juszkiewicz) [RHEL-102695]
  - net: clear the dst when changing skb protocol (Felix Maurer) [RHEL-84579]
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Felix Maurer) [RHEL-84579]
  - bpf, sockmap: Avoid using sk_socket after free when sending (Felix Maurer) [RHEL-84579]
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Felix Maurer) [RHEL-84579 RHEL-87910] {CVE-2025-21997}
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-101009 RHEL-84579] {CVE-2025-21867}
  - bpf: sockmap, fix proto update hook to avoid dup calls (Felix Maurer) [RHEL-84579]
  - bpf: syzkaller found null ptr deref in unix_bpf proto add (Felix Maurer) [RHEL-84579]
  - xsk: Fix xsk_diag use-after-free error during socket cleanup (Felix Maurer) [RHEL-84579]
  - net: atlantic: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-105362]
  - net: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: Avoid -Wflex-array-member-not-at-end warnings (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: fix warning during hot unplug (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: support reading SFP module info (Izabela Bakollari) [RHEL-105362]
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107024]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-609.el9]
changelog:
  - udmabuf: Restore ubuf->unpin_list initialization (José Expósito) [RHEL-109567]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-79910]
  - ima: annotate iint mutex to avoid lockdep false positive warnings JIRA: https://issues.redhat.com/browse/RHEL-59837 (Aaron Brookner)
  - i2c: mlxbf: avoid 64-bit division (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Improve I2C bus timing configuration (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Add repeated start condition support (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use str_read_write() helper (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Steve Dunnagan) [RHEL-103885]
  - scsi: ufs: core: Fix use-after free in init error and remove paths (Jared Kangas) [RHEL-84800] {CVE-2025-21739}
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers (Jared Kangas) [RHEL-84800]
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (Jared Kangas) [RHEL-84800]
  - scsi: ufs: Convert all platform drivers to return void (Jared Kangas) [RHEL-84800]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Čestmír Kalina) [RHEL-79880]
  - locking/ww_mutex/test: add MODULE_DESCRIPTION() (Čestmír Kalina) [RHEL-79880]
  - lockdep: suggest the fix for "lockdep bfs error:-1" on print_bfs_bug (Čestmír Kalina) [RHEL-79880]
  - lockdep: Use str_plural() to fix Coccinelle warning (Čestmír Kalina) [RHEL-79880]
  - lockdep: fix deadlock issue between lockdep and rcu (Čestmír Kalina) [RHEL-79880]
  - lockdep: Mark emergency sections in lockdep splats (Čestmír Kalina) [RHEL-79880]
  - locking/rwsem: Move is_rwsem_reader_owned() and rwsem_owner() under  CONFIG_DEBUG_RWSEMS (Čestmír Kalina) [RHEL-79880]
  - selftests: net/forwarding: test purge of active DWRR classes (Ivan Vecera) [RHEL-107487]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107487]
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107487] {CVE-2025-38107}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-610.el9]
changelog:
  - HID: Intel-thc-hid: Intel-quicki2c: Enhance QuickI2C reset flow (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: pass correct arguments to acpi_evaluate_object (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state names gramatically (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state after S4 (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Fix spelling mistake "intput" -> "input" (Benjamin Tissoires) [RHEL-65754]
  - Hid: Intel-thc-hid: Intel-thc: Fix "dubious: !x | !y" issue (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Remove deprecated PCI API calls (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc: fix CONFIG_HID dependency (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: fix build errors in um mode (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: fix potential memory corruption (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Fix error code in thc_i2c_subip_init() (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Complete THC QuickI2C driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add HIDI2C protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Complete THC QuickSPI driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add HIDSPI protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC I2C config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC SPI config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC interrupt handler (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC LTR interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC DMA interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add APIs for interrupt (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC PIO operation APIs (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC registers definition (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Add basic THC driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: THC: Add documentation (Benjamin Tissoires) [RHEL-65754]
  - kernel.spec: add '-e' option to %preun for kernel-core and kernel-uki-virt (Xuemin Li) [RHEL-107668]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-104374]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106648] {CVE-2025-38464}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-611.el9]
changelog:
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix kobject reference count leak (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on kobject creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix shift OOB in kfifo allocation for zero pktlen (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on size mismatch in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: handle kzalloc() allocation failure in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Remove static WACOM_PKGLEN_MAX limit (Benjamin Tissoires) [RHEL-102058]
  - HID: Wacom: Add PCI Wacom device support (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Status luminance properties should set brightness of all LEDs (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve behavior of non-standard LED brightness values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix when get product name maybe null pointer (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Set eraser status when either 'Eraser' or 'Invert' usage is set (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support devices with two touchrings (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Add preliminary support for high-resolution wheel scrolling (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support touchrings with relative motion (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve warning for tablets falling back to default resolution (Benjamin Tissoires) [RHEL-102058]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-107437]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-107437]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.1.1.el9_7]
changelog:
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-611.2.1.el9_7]
changelog:
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-15
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Jan Macku <jamacku@redhat.com> - 3:2.1.1-1
changelog:
  - rebase to 2.1.1 (RHEL-67117)
      Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

  	   There are no ipv4-mapped addresses in the real network which we
  	   operate on, so use just ipv4 in such cases, but allow users
  	   to specify it this way for convenience.

  	  Return back more robast poll(2) loop handling.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-57
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45994


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-22.1
changelog:
  - RHEL-112006 CVE-2025-53905 vim: Vim path traversial
  - RHEL-112010 CVE-2025-53906 vim: Vim path traversal


author: Than Ngo <than@redhat.com> - 2.21-30
changelog:
  - Add a check to ensure that /proc/$$/exe can be read
    thanks to mbliss@redhat.com for the report and the proposed patch
    Resolves: RHEL-101066


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-14038


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


