# changelog

author: Julio Faracco <jfaracco@redhat.com> [6.12.0-91.el10]
changelog:
  - loop: Add sanity check for read/write_iter (Ming Lei) [RHEL-83595]
  - fs: add kern_path_locked_negative() (Ming Lei) [RHEL-83595]
  - tools headers: Sync uapi/linux/fcntl.h with the kernel sources (Ming Lei) [RHEL-83595]
  - perf probe: Pick the correct dwarf die while adding probe points (Ming Lei) [RHEL-83595]
  - devtmpfs: don't use vfs_getattr_nosec to query i_mode (Ming Lei) [RHEL-83595]
  - VFS: add common error checks to lookup_one_qstr_excl() (Ming Lei) [RHEL-83595]
  - VFS: change kern_path_locked() and user_path_locked_at() to never return negative dentry (Ming Lei) [RHEL-83595]
  - fs: move the bdex_statx call to vfs_getattr_nosec (Ming Lei) [RHEL-83595]
  - libfs: kill empty_dir_getattr() (Ming Lei) [RHEL-83595]
  - fs: Simplify getattr interface function checking AT_GETATTR_NOSEC flag (Ming Lei) [RHEL-83595]
  - fs/stat.c: switch to CLASS(fd_raw) (Ming Lei) [RHEL-83595]
  - kill getname_statx_lookup_flags() (Ming Lei) [RHEL-83595]
  - io_statx_prep(): use getname_uflags() (Ming Lei) [RHEL-83595]
  - getname_maybe_null() - the third variant of pathname copy-in (Ming Lei) [RHEL-83595]
  - teach filename_lookup() to treat NULL filename as "" (Ming Lei) [RHEL-83595]
  - dm table: Fix W=1 build warning when mempool_needs_integrity is unused (Ming Lei) [RHEL-83595]
  - block: move blkdev_{get,put} _no_open prototypes out of blkdev.h (Ming Lei) [RHEL-83595]
  - block: never reduce ra_pages in blk_apply_bdi_limits (Ming Lei) [RHEL-83595]
  - block: integrity: Do not call set_page_dirty_lock() (Ming Lei) [RHEL-83595]
  - loop: stop using vfs_iter_{read,write} for buffered I/O (Ming Lei) [RHEL-83595]
  - loop: LOOP_SET_FD: send uevents for partitions (Ming Lei) [RHEL-83595]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Ming Lei) [RHEL-83595]
  - loop: aio inherit the ioprio of original request (Ming Lei) [RHEL-83595]
  - block: fix resource leak in blk_register_queue() error path (Ming Lei) [RHEL-83595]
  - block: add SPDX header line to blk-throttle.h (Ming Lei) [RHEL-83595]
  - null_blk: Use strscpy() instead of strscpy_pad() in null_add_dev() (Ming Lei) [RHEL-83595]
  - block: add for_each_mp_bvec() (Ming Lei) [RHEL-83595]
  - block: don't grab elevator lock during queue initialization (Ming Lei) [RHEL-83595]
  - block: remove unused nseg parameter (Ming Lei) [RHEL-83595]
  - io_uring/rw: don't mask in f_iocb_flags (Ming Lei) [RHEL-83595]
  - docs: sysfs-block: Clarify integrity sysfs attributes (Ming Lei) [RHEL-83595]
  - block/blk-iocost: ensure 'ret' is set on error (Ming Lei) [RHEL-83595]
  - block: correct locking order for protecting blk-wbt parameters (Ming Lei) [RHEL-83595]
  - block: release q->elevator_lock in ioc_qos_write (Ming Lei) [RHEL-83595]
  - ublk: remove io_cmds list in ublk_queue (Ming Lei) [RHEL-83595]
  - blk-cgroup: improve policy registration error handling (Ming Lei) [RHEL-83595]
  - loop: move vfs_fsync() out of loop_update_dio() (Ming Lei) [RHEL-83595]
  - block: fix a comment in the queue_attrs[] array (Ming Lei) [RHEL-83595]
  - block: protect debugfs attribute method hctx_busy_show (Ming Lei) [RHEL-83595]
  - block: remove unnecessary goto labels in debugfs attribute read methods (Ming Lei) [RHEL-83595]
  - block: protect debugfs attrs using elevator_lock instead of sysfs_lock (Ming Lei) [RHEL-83595]
  - block: remove unused parameter 'q' parameter in __blk_rq_map_sg() (Ming Lei) [RHEL-83595]
  - block: fix adding folio to bio (Ming Lei) [RHEL-83595]
  - block: remove unused parameter (Ming Lei) [RHEL-83595]
  - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 (Ming Lei) [RHEL-83595]
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-83595]
  - block: protect hctx attributes/params using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect read_ahead_kb using q->limits_lock (Ming Lei) [RHEL-83595]
  - block: protect wbt_lat_usec using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect nr_requests update using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: introduce a dedicated lock for protecting queue elevator updates (Ming Lei) [RHEL-83595]
  - block: remove q->sysfs_lock for attributes which don't need it (Ming Lei) [RHEL-83595]
  - block: move q->sysfs_lock and queue-freeze under show/store method (Ming Lei) [RHEL-83595]
  - block: acquire q->limits_lock while reading sysfs attributes (Ming Lei) [RHEL-83595]
  - badblocks: use sector_t instead of int to avoid truncation of badblocks length (Ming Lei) [RHEL-83595]
  - badblocks: return boolean from badblocks_set() and badblocks_clear() (Ming Lei) [RHEL-83595]
  - badblocks: fix missing bad blocks on retry in _badblocks_check() (Ming Lei) [RHEL-83595]
  - badblocks: fix merge issue when new badblocks align with pre+1 (Ming Lei) [RHEL-83595]
  - badblocks: try can_merge_front before overlap_front (Ming Lei) [RHEL-83595]
  - badblocks: fix the using of MAX_BADBLOCKS (Ming Lei) [RHEL-83595]
  - badblocks: return error if any badblock set fails (Ming Lei) [RHEL-83595]
  - badblocks: return error directly when setting badblocks exceeds 512 (Ming Lei) [RHEL-83595]
  - badblocks: attempt to merge adjacent badblocks during ack_all_badblocks (Ming Lei) [RHEL-83595]
  - badblocks: factor out a helper try_adjacent_combine (Ming Lei) [RHEL-83595]
  - badblocks: Fix error shift ops (Ming Lei) [RHEL-83595]
  - block: Correctly initialize BLK_INTEGRITY_NOGENERATE and BLK_INTEGRITY_NOVERIFY (Ming Lei) [RHEL-83595]
  - block: ensure correct integrity capability propagation in stacked devices (Ming Lei) [RHEL-83595]
  - blk-throttle: carry over directly (Ming Lei) [RHEL-83595]
  - blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) [RHEL-83595]
  - blk-throttle: remove last_bytes_disp and last_ios_disp (Ming Lei) [RHEL-83595]
  - blk-throttle: fix lower bps rate by throtl_trim_slice() (Ming Lei) [RHEL-83595]
  - ublk: enforce ublks_max only for unprivileged devices (Ming Lei) [RHEL-83595]
  - loop: Remove struct loop_func_table (Ming Lei) [RHEL-83595]
  - ublk: add DMA alignment limit (Ming Lei) [RHEL-83595]
  - block: split struct bio_integrity_payload (Ming Lei) [RHEL-83595]
  - block: move the block layer auto-integrity code into a new file (Ming Lei) [RHEL-83595]
  - block: mark bounce buffering as incompatible with integrity (Ming Lei) [RHEL-83595]
  - null_blk: do partial IO for bad blocks (Ming Lei) [RHEL-83595]
  - null_blk: pass transfer size to null_handle_rq() (Ming Lei) [RHEL-83595]
  - null_blk: replace null_process_cmd() call in null_zone_write() (Ming Lei) [RHEL-83595]
  - null_blk: introduce badblocks_once parameter (Ming Lei) [RHEL-83595]
  - null_blk: generate null_blk configfs features string (Ming Lei) [RHEL-83595]
  - ublk: complete command synchronously on error (Ming Lei) [RHEL-83595]
  - blk-wbt: Cleanup a comment in wb_timer_fn (Ming Lei) [RHEL-83595]
  - blk-wbt: Fix some comments (Ming Lei) [RHEL-83595]
  - loop: take the file system minimum dio alignment into account (Ming Lei) [RHEL-83595]
  - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Ming Lei) [RHEL-83595]
  - loop: set LO_FLAGS_DIRECT_IO in loop_assign_backing_file (Ming Lei) [RHEL-83595]
  - loop: factor out a loop_assign_backing_file helper (Ming Lei) [RHEL-83595]
  - block: Remove commented out code (Ming Lei) [RHEL-83595]
  - Revert "driver: block: release the lo_work_lock before queue_work" (Ming Lei) [RHEL-83595]
  - block: refactor rq_qos_wait() (Ming Lei) [RHEL-83595]
  - block: introduce init_wait_func() (Ming Lei) [RHEL-83595]
  - loop: release the lo_work_lock before queue_work (Ming Lei) [RHEL-83595]
  - blk-crypto: add ioctls to create and prepare hardware-wrapped keys (Ming Lei) [RHEL-83595]
  - blk-crypto: show supported key types in sysfs (Ming Lei) [RHEL-83595]
  - blk-crypto: add basic hardware-wrapped key support (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Remove ufs_hba_variant_ops::program_key (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Convert to use UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Add ufs_hba_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Fix crypto key eviction (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: convert to use custom crypto profile (Ming Lei) [RHEL-83595]
  - mmc: crypto: add mmc_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: fix crypto key eviction (Ming Lei) [RHEL-83595]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-83595]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-83595]
  - ublk: set_params: properly check if parameters can be applied (Ming Lei) [RHEL-83595]
  - block: make bio_integrity_map_user() static inline (Ming Lei) [RHEL-83595]
  - scsi: add support for user-meta interface (Ming Lei) [RHEL-83595]
  - nvme: add support for passing on the application tag (Ming Lei) [RHEL-83595]
  - block: add support to pass user meta buffer (Ming Lei) [RHEL-83595]
  - block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags (Ming Lei) [RHEL-83595]
  - io_uring: introduce attributes for read/write and PI support (Ming Lei) [RHEL-83595]
  - fs: introduce IOCB_HAS_METADATA for metadata (Ming Lei) [RHEL-83595]
  - fs, iov_iter: define meta io descriptor (Ming Lei) [RHEL-83595]
  - block: modify bio_integrity_map_user to accept iov_iter as argument (Ming Lei) [RHEL-83595]
  - block: copy back bounce buffer to user-space correctly in case of split (Ming Lei) [RHEL-83595]
  - block: define set of integrity flags to be inherited by cloned bip (Ming Lei) [RHEL-83595]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74336]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74336]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-82381]
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87947] {CVE-2025-21963}
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-87556]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93267] {CVE-2025-37943}
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Chunyu Hu) [RHEL-87654]
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-92996]
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92762]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92762]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92762]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92762]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92762]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-92762]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-92762]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92762]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86505]
  - redhat: configs: rhel: Enable CX231XX driver (Kate Hsuan) [RHEL-86822]
  - iomap: avoid avoid truncating 64-bit offset to 32 bits (Brian Foster) [RHEL-85399]
  - iomap: fix zero padding data issue in concurrent append writes (Brian Foster) [RHEL-85399]
  - iomap: pass byte granular end position to iomap_add_to_ioend (Brian Foster) [RHEL-85399]
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-85399]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-85399]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-85399]
  - iomap: warn on zero range of a post-eof folio (Brian Foster) [RHEL-85399]
  - iomap: drop an obsolete comment in iomap_dio_bio_iter (Brian Foster) [RHEL-85399]
  - iomap: add a merge boundary flag (Brian Foster) [RHEL-85399]
  - fs: iomap: Atomic write support (Brian Foster) [RHEL-85399]
  - fs: Export generic_atomic_write_valid() (Brian Foster) [RHEL-85399]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-92.el10]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93398]
  - perf python: Remove some unused macros (_PyUnicode_FromString(arg), etc) (Michael Petlan) [RHEL-77936]
  - redhat/kernel.spec: Remove /usr/share/perf-core from being installed (Michael Petlan) [RHEL-77936]
  - libapi: Add missing header with NAME_MAX define to io_dir.h (Michael Petlan) [RHEL-77936]
  - perf evsel: tp_format accessing improvements (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Michael Petlan) [RHEL-77936]
  - perf pmu: Handle memory failure in tool_pmu__new() (Michael Petlan) [RHEL-77936]
  - perf pmu: Dynamically allocate tool PMU (Michael Petlan) [RHEL-77936]
  - perf pmu: Switch to io_dir__readdir (Michael Petlan) [RHEL-77936]
  - tools lib api: Add io_dir an allocation free readdir alternative (Michael Petlan) [RHEL-77936]
  - perf pmu: Rename name matching for no suffix or wildcard variants (Michael Petlan) [RHEL-77936]
  - perf evsel: Reduce scanning core PMUs in is_hybrid (Michael Petlan) [RHEL-77936]
  - perf pmus: Restructure pmu_read_sysfs to scan fewer PMUs (Michael Petlan) [RHEL-77936]
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Michael Petlan) [RHEL-77936]
  - perf evsel: Add pmu_name helper (Michael Petlan) [RHEL-77936]
  - perf tests: Fix Tool PMU test segfault (Michael Petlan) [RHEL-77936]
  - perf tools: Add skip check in tool_pmu__event_to_str() (Michael Petlan) [RHEL-77936]
  - perf tools: Fix is_compat_mode build break in ppc64 (Michael Petlan) [RHEL-77936]
  - perf test: Fix Hwmon PMU test endianess issue (Michael Petlan) [RHEL-77936]
  - perf machine: Fixup kernel maps ends after adding extra maps (Michael Petlan) [RHEL-77936]
  - perf maps: Introduce map__set_kmap_maps() for kernel maps (Michael Petlan) [RHEL-77936]
  - perf x86/topdown: Fix topdown leader sampling test error on hybrid (Michael Petlan) [RHEL-77936]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-77936]
  - powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (Michael Petlan) [RHEL-77936] {CVE-2025-22094}
  - tools headers: Sync uapi/asm-generic/socket.h with the kernel sources (Michael Petlan) [RHEL-77936]
  - tools: Unify top-level quiet infrastructure (Michael Petlan) [RHEL-77936]
  - perf cpumap: Fix die and cluster IDs (Michael Petlan) [RHEL-77936]
  - perf test: Skip syscall enum test if no landlock syscall (Michael Petlan) [RHEL-77936]
  - perf trace: Fix runtime error of index out of bounds (Michael Petlan) [RHEL-77936]
  - perf trace: Fix BPF loading failure (-E2BIG) (Michael Petlan) [RHEL-77936]
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-77936]
  - perf bench: Fix undefined behavior in cmpworker() (Michael Petlan) [RHEL-77936]
  - perf annotate: Prefer passing evsel to evsel->core.idx (Michael Petlan) [RHEL-77936]
  - perf lock: Rename fields in lock_type_table (Michael Petlan) [RHEL-77936]
  - perf lock: Add percpu-rwsem for type filter (Michael Petlan) [RHEL-77936]
  - perf lock: Fix parse_lock_type which only retrieve one lock flag (Michael Petlan) [RHEL-77936]
  - perf lock: Fix return code for functions in __cmd_contention (Michael Petlan) [RHEL-77936]
  - perf hist: Fix width calculation in hpp__fmt() (Michael Petlan) [RHEL-77936]
  - perf hist: Fix bogus profiles when filters are enabled (Michael Petlan) [RHEL-77936]
  - perf hist: Deduplicate cmp/sort/collapse code (Michael Petlan) [RHEL-77936]
  - perf test: Improve verbose documentation (Michael Petlan) [RHEL-77936]
  - perf test: Add a runs-per-test flag (Michael Petlan) [RHEL-77936]
  - perf test: Send list output to stdout rather than stderr (Michael Petlan) [RHEL-77936]
  - perf test: Rename functions and variables for better clarity (Michael Petlan) [RHEL-77936]
  - perf tools: Expose quiet/verbose variables in Makefile.perf (Michael Petlan) [RHEL-77936]
  - perf config: Add a function to set one variable in .perfconfig (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Return correct value for skipping (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Add missing description (Michael Petlan) [RHEL-77936]
  - perf inject: Fix use without initialization of local variables (Michael Petlan) [RHEL-77936]
  - perf probe: Rename err label (Michael Petlan) [RHEL-77936]
  - perf record: Fix segfault with --off-cpu when debuginfo is not enabled (Michael Petlan) [RHEL-77936]
  - perf tests base_probe: Fix check for the count of existing probes in test_adding_kernel (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add license files (Michael Petlan) [RHEL-77936]
  - perf test brstack: Speed up running test by using tr -s instead of xargs (Michael Petlan) [RHEL-77936]
  - perf tools mips: Fix mips syscall generation (Michael Petlan) [RHEL-77936]
  - perf tests arm_spe: Add test for discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Don't allocate buffer or tracking event in discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Pull out functions for aux buffer and tracking setup (Michael Petlan) [RHEL-77936]
  - perf report: Fix misleading help message about --demangle (Michael Petlan) [RHEL-77936]
  - perf ftrace: Fix display for range of the first bucket (Michael Petlan) [RHEL-77936]
  - perf ftrace: Check min/max latency only with bucket range (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf tarball (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event (Michael Petlan) [RHEL-77936]
  - perf symbol-elf: Avoid a weak cxx_demangle_sym function (Michael Petlan) [RHEL-77936]
  - perf trace: Fix unaligned access for augmented args (Michael Petlan) [RHEL-77936]
  - perf test: Mark remaining probe tests as exclusive (Michael Petlan) [RHEL-77936]
  - perf tools: Remove dependency on libaudit (Michael Petlan) [RHEL-77936]
  - perf tools s390: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools powerpc: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools mips: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools loongarch: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools arm64: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools parisc: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools alpha: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools x86: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools xtensa: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools sparc: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools sh: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arm: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools csky: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arc: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools: Create generic syscall table support (Michael Petlan) [RHEL-77936]
  - perf test cpumap: Avoid use-after-free following merge (Michael Petlan) [RHEL-77936]
  - perf llvm-add2line: Remove unused symbol_conf.h include (Michael Petlan) [RHEL-77936]
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool (Michael Petlan) [RHEL-77936]
  - perf jitdump: Fixup in_pidns member when java agent and 'perf record' are not in the same pidns (Michael Petlan) [RHEL-77936]
  - perf namespaces: Introduce nsinfo__set_in_pidns() (Michael Petlan) [RHEL-77936]
  - perf jitdump: Accept jitdump mmaps emitted from inside containers (Michael Petlan) [RHEL-77936]
  - perf machine: Don't ignore _etext when not a text symbol (Michael Petlan) [RHEL-77936]
  - perf maps: Fix display of kernel symbols (Michael Petlan) [RHEL-77936]
  - perf test: Update ftrace test to use --graph-opts (Michael Petlan) [RHEL-77936]
  - perf ftrace profile: Add --graph-opts option (Michael Petlan) [RHEL-77936]
  - perf ftrace: Display latency statistics at the end (Michael Petlan) [RHEL-77936]
  - perf evsel: Improve the evsel__open_strerror() for EBUSY (Michael Petlan) [RHEL-77936]
  - perf tests shell task_analyzer: Run this test exclusively (Michael Petlan) [RHEL-77936]
  - perf tests code-reading: Handle change in objdump output from binutils >= 2.41 on riscv (Michael Petlan) [RHEL-77936]
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Michael Petlan) [RHEL-77936]
  - perf stat: Document and clarify outstate members (Michael Petlan) [RHEL-77936]
  - perf stat: Document and simplify interval timestamps (Michael Petlan) [RHEL-77936]
  - perf docs: Add documentation for --force-btf option (Michael Petlan) [RHEL-77936]
  - perf path: Remove unused is_executable_file() (Michael Petlan) [RHEL-77936]
  - perf values: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf stream: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf jevents: Provide better path information for broken JSON (Michael Petlan) [RHEL-77936]
  - perf lock contention: Handle slab objects in -L/--lock-filter option (Michael Petlan) [RHEL-77936]
  - perf lock contention: Resolve slab object name using BPF (Michael Petlan) [RHEL-77936]
  - perf lock contention: Run BPF slab cache iterator (Michael Petlan) [RHEL-77936]
  - perf lock contention: Add and use LCB_F_TYPE_MASK (Michael Petlan) [RHEL-77936]
  - perf script: Cache the output type (Michael Petlan) [RHEL-77936]
  - perf python: Correctly throw IndexError (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evsel (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evlist (Michael Petlan) [RHEL-77936]
  - perf python: Add parse_events function (Michael Petlan) [RHEL-77936]
  - perf build: Remove test library from python shared object (Michael Petlan) [RHEL-77936]
  - perf kwork: Make perf_kwork_add_work a callback (Michael Petlan) [RHEL-77936]
  - perf bench: Remove reference to cmd_inject (Michael Petlan) [RHEL-77936]
  - perf lock: Move common lock contention code to new file (Michael Petlan) [RHEL-77936]
  - perf env: Move arch errno function to only use in env (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Remove stale build comment (Michael Petlan) [RHEL-77936]
  - perf x86: Define arch_fetch_insn in NO_AUXTRACE builds (Michael Petlan) [RHEL-77936]
  - perf script: Move perf_sample__sprintf_flags to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_fetch_insn to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_spec code to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf stat: Move stat_config into config.c (Michael Petlan) [RHEL-77936]
  - perf script: Move find_scripts to browser/scripts.c (Michael Petlan) [RHEL-77936]
  - perf script: Use openat for directory iteration (Michael Petlan) [RHEL-77936]
  - perf kvm: Move functions used in util out of builtin (Michael Petlan) [RHEL-77936]
  - perf script: Move scripting_max_stack out of builtin (Michael Petlan) [RHEL-77936]
  - perf python: Remove unused #include (Michael Petlan) [RHEL-77936]
  - perf python: Constify variables and parameters (Michael Petlan) [RHEL-77936]
  - perf python: Remove python 2 scripting support (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add a test for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add documentation for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Improve man page format (Michael Petlan) [RHEL-77936]
  - perf tools: Add missing_features for aux_start_paused, aux_pause, aux_resume (Michael Petlan) [RHEL-77936]
  - perf tools: Parse aux-action (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux-action config term (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux_start_paused, aux_pause and aux_resume (Michael Petlan) [RHEL-77936]
  - perf build: Minor improvement for linking libzstd (Michael Petlan) [RHEL-77936]
  - tools build: Add feature test for libelf with ZSTD (Michael Petlan) [RHEL-77936]
  - perf tools tests shell base_probe: Enhance print_overall_results to print summary information (Michael Petlan) [RHEL-77936]
  - perf tools arch powerpc: Add register mask for power11 PVR in extended regs (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Fix compiler error for clang 12 (Michael Petlan) [RHEL-77936]
  - tools build: Test for presence of libtraceevent and libtracefs in test-all.c (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libslang-include-subdir=1 if test-all.c builds (Michael Petlan) [RHEL-77936]
  - perf tests switch-tracking: Set this test to run exclusively (Michael Petlan) [RHEL-77936]
  - perf test: Introduce DEFINE_SUITE_EXCLUSIVE() (Michael Petlan) [RHEL-77936]
  - perf expr: Initialize is_test value in expr__ctx_new() (Michael Petlan) [RHEL-77936]
  - perf tests: Fix an incorrect type in append_script() (Michael Petlan) [RHEL-77936]
  - perf test: Remove duplicate word (Michael Petlan) [RHEL-77936]
  - perf string: Avoid undefined NULL+1 (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Update N2/V2 events from source (Michael Petlan) [RHEL-77936]
  - perf tools: Avoid unaligned pointer operations (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libcap=1 if libcap-devel isn't available (Michael Petlan) [RHEL-77936]
  - tools build feature: Add some comments to explain the FEATURE_TESTS logic (Michael Petlan) [RHEL-77936]
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_btf() (Michael Petlan) [RHEL-77936]
  - perf jevents: Fix build issue in '*/' in event descriptions (Michael Petlan) [RHEL-77936]
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Michael Petlan) [RHEL-77936]
  - perf probe: Replace unacceptable characters when generating event name (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Add --max-latency option (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --min-latency to narrow down into a latency range (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --bucket-range to ask for linear bucketing (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Pass ftrace pointer to histogram routines to pass more args (Michael Petlan) [RHEL-77936]
  - perf tests: Enable tests disabled due to tracepoint parsing (Michael Petlan) [RHEL-77936]
  - perf evsel: Allow evsel__newtp without libtraceevent (Michael Petlan) [RHEL-77936]
  - perf evsel: Add/use accessor for tp_format (Michael Petlan) [RHEL-77936]
  - perf trace-event: Always build trace-event-info.c (Michael Petlan) [RHEL-77936]
  - perf trace-event: Constify print arguments (Michael Petlan) [RHEL-77936]
  - tool api fs: Correctly encode errno for read/write open failures (Michael Petlan) [RHEL-77936]
  - perf env: Ensure failure broken topology file reads are always -1 encoded (Michael Petlan) [RHEL-77936]
  - perf btf: Make the sigtrap test helper to find a member by name widely available (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Add support for SPE Data Source packet on AmpereOne (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Prepare for adding data source packet implementations for other cores (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add checking for reference counter (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add more tests for CPU map merging (Michael Petlan) [RHEL-77936]
  - libperf cpumap: Refactor perf_cpu_map__merge() (Michael Petlan) [RHEL-77936]
  - perf config: Fix trival typo 'an' -> 'can' (Michael Petlan) [RHEL-77936]
  - perf script python: Improve physical mem type resolution (Michael Petlan) [RHEL-77936]
  - perf disasm: Return a proper error when not determining the file type (Michael Petlan) [RHEL-77936]
  - tools: Sync if_xdp.h uapi tooling header (Michael Petlan) [RHEL-77936]
  - perf docs: arm_spe: Document new discard mode (Michael Petlan) [RHEL-77936]
  - perf: arm_spe: Add format option for discard mode (Michael Petlan) [RHEL-77936]
  - perf: Switch back to struct platform_driver::remove() (Michael Petlan) [RHEL-77936]
  - perf/amd/ibs: Prevent leaking sensitive data to userspace (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix error handling in init_rapl_pmus() (Michael Petlan) [RHEL-77936]
  - perf/x86: Check data address for IBS software filter (Michael Petlan) [RHEL-77936]
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Michael Petlan) [RHEL-77936]
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Use better start period for frequency mode (Michael Petlan) [RHEL-77936]
  - perf/core: Fix low freq setting via IOC_PERIOD (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix low freqency setting issue (Michael Petlan) [RHEL-77936]
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (Michael Petlan) [RHEL-77936] {CVE-2025-21895}
  - perf/core: Add RCU read lock protection to perf_iterate_ctx() (Michael Petlan) [RHEL-77936] {CVE-2025-21889}
  - perf/x86/intel: Fix event constraints for LNC (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Clean up PEBS-via-PT on hybrid (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix the error checking order (Michael Petlan) [RHEL-77936]
  - perf: map pages in advance (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Support more units on Granite Rapids (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Clean up func_id (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-77936]
  - perf/x86: Relax privilege filter restriction on AMD IBS (Michael Petlan) [RHEL-77936]
  - perf/core: Export perf_exclude_event() (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add core energy counter support for AMD CPUs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Move the cntr_mask to rapl_pmus struct (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the global variable rapl_msrs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Modify the generic variable names to *_pkg* (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add arguments to the init and cleanup functions (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Make rapl_model struct global (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Rename rapl_pmu variables (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the cpu_to_rapl_pmu() function (Michael Petlan) [RHEL-77936]
  - x86/topology: Introduce topology_logical_core_id() (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Factor out functions for PEBS records processing (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Clarify adaptive PEBS processing (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_brstack (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_callchain (Michael Petlan) [RHEL-77936]
  - perf/core: Save raw sample data conditionally based on sample type (Michael Petlan) [RHEL-77936]
  - x86/cpu: Replace PEBS use of 'x86_cpu_desc' use with 'x86_cpu_id' (Michael Petlan) [RHEL-77936]
  - x86/cpu: Expose only stepping min/max interface (Michael Petlan) [RHEL-77936]
  - x86/cpu: Introduce new microcode matching helper (Michael Petlan) [RHEL-77936]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Michael Petlan) [RHEL-77936]
  - redhat/spec: fix selftests dependencies (Gregory Bell) [RHEL-88228]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-93.el10]
changelog:
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (José Expósito) [RHEL-85955]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (José Expósito) [RHEL-85955]
  - jiffies: Define secs_to_jiffies() (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: pass data to get_dai_id too (José Expósito) [RHEL-85955]
  - kthread: modify kernel-doc function name to match code (José Expósito) [RHEL-85955]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU exp kworkers (José Expósito) [RHEL-85955]
  - treewide: Introduce kthread_run_worker[_on_cpu]() (José Expósito) [RHEL-85955]
  - kthread: Unify kthread_create_on_cpu() and kthread_create_worker_on_cpu() automatic format (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU boost (José Expósito) [RHEL-85955]
  - kthread: Implement preferred affinity (José Expósito) [RHEL-85955]
  - mm: Create/affine kswapd to its preferred node (José Expósito) [RHEL-85955]
  - mm: Create/affine kcompactd to its preferred node (José Expósito) [RHEL-85955]
  - kthread: Default affine kthread to its preferred NUMA node (José Expósito) [RHEL-85955]
  - kthread: Make sure kthread hasn't started while binding it (José Expósito) [RHEL-85955]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (José Expósito) [RHEL-85955]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (José Expósito) [RHEL-85955]
  - lib: test_objpool: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - kallsyms: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - soc/qman: test: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: qedi: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2i: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - firmware: stratix10-svc: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - arm/bL_switcher: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - cgroup/dmem: Don't open-code css_for_each_descendant_pre (José Expósito) [RHEL-85955]
  - cgroup/rdma: Drop bogus PAGE_COUNTER select (José Expósito) [RHEL-85955]
  - doc/cgroup: Fix title underline length (José Expósito) [RHEL-85955]
  - drm/doc: Include new drm-compute documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Fix parameters documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Select PAGE_COUNTER (José Expósito) [RHEL-85955]
  - kernel/cgroup: Add "dmem" memory accounting cgroup (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.14 backport (José Expósito) [RHEL-85955]
  - media: uapi: Add MEDIA_BUS_FMT_RGB101010_1X7X5_{SPWG, JEIDA} (José Expósito) [RHEL-85955]
  - fbdev: Fix recursive dependencies wrt BACKLIGHT_CLASS_DEVICE (José Expósito) [RHEL-85955]
  - drm/xe: remove unused xe_pciids.h harder, add missing PCI ID (José Expósito) [RHEL-85955]
  - drm/xe: switch to common PCI ID macros (José Expósito) [RHEL-85955]
  - drm/xe/ptl: Add PTL platform definition (José Expósito) [RHEL-85955]
  - drm/intel/pciids: rename i915_pciids.h to just pciids.h (José Expósito) [RHEL-85955]
  - drm/i915/pciids: add PVC PCI ID macros (José Expósito) [RHEL-85955]
  - drm/i915/xe3lpd: reuse xe2lpd definition (José Expósito) [RHEL-85955]
  - drm/i915/pciids: separate ARL and MTL PCI IDs (José Expósito) [RHEL-85955]
  - drm/i915/pciids: use designated initializers in INTEL_VGA_DEVICE() (José Expósito) [RHEL-85955]
  - fs: port files to file_ref (José Expósito) [RHEL-85955]
  - fs: add file_ref (José Expósito) [RHEL-85955]
  - fs: protect backing files with rcu (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.13 backport (José Expósito) [RHEL-85955]
  - vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92474]
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88152]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88152]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88152]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88152]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88152]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88152]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88152]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88152]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88152]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88152]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88152]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88152]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-85400]
  - jbd2: flush filesystem device before updating tail sequence (Brian Foster) [RHEL-85400]
  - jbd2: increase IO priority for writing revoke records (Brian Foster) [RHEL-85400]
  - jbd2: Fix comment describing journal_init_common() (Brian Foster) [RHEL-85400]
  - ext4: prevent an infinite loop in the lazyinit thread (Brian Foster) [RHEL-85400]
  - ext4: use struct_size() to improve ext4_htree_store_dirent() (Brian Foster) [RHEL-85400]
  - ext4: annotate struct fname with __counted_by() (Brian Foster) [RHEL-85400]
  - ext4: use str_yes_no() helper function (Brian Foster) [RHEL-85400]
  - ext4: prevent delalloc to nodelalloc on remount (Brian Foster) [RHEL-85400]
  - jbd2: make b_frozen_data allocation always succeed (Brian Foster) [RHEL-85400]
  - ext4: cleanup variable name in ext4_fc_del() (Brian Foster) [RHEL-85400]
  - ext4: use string choices helpers (Brian Foster) [RHEL-85400]
  - jbd2: remove the 'success' parameter from the jbd2_do_replay() function (Brian Foster) [RHEL-85400]
  - jbd2: remove useless 'block_error' variable (Brian Foster) [RHEL-85400]
  - jbd2: factor out jbd2_do_replay() (Brian Foster) [RHEL-85400]
  - jbd2: refactor JBD2_COMMIT_BLOCK process in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: unified release of buffer_head in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: remove redundant judgments for check v1 checksum (Brian Foster) [RHEL-85400]
  - ext4: use ERR_CAST to return an error-valued pointer (Brian Foster) [RHEL-85400]
  - ext4: partial zero eof block on unaligned inode size extension (Brian Foster) [RHEL-85400]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Brian Foster) [RHEL-85400]
  - ext4: pass write-hint for buffered IO (Brian Foster) [RHEL-85400]
  - ext4: fix race in buffer_head read fault injection (Brian Foster) [RHEL-85400]
  - ext4: don't pass full mapping flags to ext4_es_insert_extent() (Brian Foster) [RHEL-85400]
  - ext4: mark ctx_*_flags() with __maybe_unused (Brian Foster) [RHEL-85400]
  - ext4: return error on syncfs after shutdown (Brian Foster) [RHEL-85400]
  - fs: ext4: Don't use CMA for buffer_head (Brian Foster) [RHEL-85400]
  - ext4: simplify if condition (Brian Foster) [RHEL-85400]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-85400]
  - ext4: WARN if a full dir leaf block has only one dentry (Brian Foster) [RHEL-85400]
  - ext4: show the default enabled prefetch_block_bitmaps option (Brian Foster) [RHEL-85400]
  - ext4: Do not fallback to buffered-io for DIO atomic write (Brian Foster) [RHEL-85400]
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Brian Foster) [RHEL-85400]
  - ext4: Check for atomic writes support in write iter (Brian Foster) [RHEL-85400]
  - ext4: Add statx support for atomic writes (Brian Foster) [RHEL-85400]
  - ext4: avoid remount errors with 'abort' mount option (Brian Foster) [RHEL-85400]
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Brian Foster) [RHEL-85400]
  - ext4: Call ext4_journal_stop(handle) only once in ext4_dio_write_iter() (Brian Foster) [RHEL-85400]
  - module: Convert symbol namespace to string literal (Eder Zulian) [RHEL-78707]
  - iommu/vt-d: Fix possible circular locking dependency (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix header file (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Fix suspicious RCU usage (Eder Zulian) [RHEL-78701] {CVE-2025-21876}
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Eder Zulian) [RHEL-78701]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Eder Zulian) [RHEL-78701]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Eder Zulian) [RHEL-78701] {CVE-2024-57999}
  - scatterlist: fix a typo (Eder Zulian) [RHEL-78701]
  - docs/core-api: swiotlb: fix typos (Eder Zulian) [RHEL-78701]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Eder Zulian) [RHEL-78702]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Eder Zulian) [RHEL-78701]
  - iommu: Fix a spelling error (Eder Zulian) [RHEL-78701]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Eder Zulian) [RHEL-78701]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Eder Zulian) [RHEL-78701] {CVE-2025-21770}
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Eder Zulian) [RHEL-78701]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Eder Zulian) [RHEL-78707]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Eder Zulian) [RHEL-78707]
  - iommufd/selftest: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78707]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove dev == NULL checks (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Eder Zulian) [RHEL-78701]
  - iommu/amd: remove return value of amd_iommu_detect (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function get_dte256() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Eder Zulian) [RHEL-75907]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Eder Zulian) [RHEL-75907]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Eder Zulian) [RHEL-75907]
  - iommu/vt-d: Link cache tags of same iommu unit together (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove iommu cap audit (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Eder Zulian) [RHEL-78701] {CVE-2025-21833}
  - iommu: Use str_enable_disable-like helpers (Eder Zulian) [RHEL-78701]
  - iommu: Remove the remove_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/amd: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu: Detaching pasid by attaching to the blocked_domain (Eder Zulian) [RHEL-78701]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Eder Zulian) [RHEL-78701]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add support for PRR bit setup (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Eder Zulian) [RHEL-78702]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Eder Zulian) [RHEL-78702]
  - iommu: Manage driver probe deferral better (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Retire probe deferral workaround (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Make instance lookup robust (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Log better event records (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Eder Zulian) [RHEL-78702]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Eder Zulian) [RHEL-78707]
  - iommufd: Fix typos in kernel-doc comments (Eder Zulian) [RHEL-78707]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Add ops->domain_alloc_nested() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Improve amd_iommu_release_device() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add ops->release_domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reorder attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Eder Zulian) [RHEL-78701]
  - iommu/amd: Rearrange attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reduce domain lock scope in attach device path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not detach devices in domain free path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommus variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: xarray to track protection_domain->iommu list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use ida interface to manage protection domain ID (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not try copy old DTE resume path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Eder Zulian) [RHEL-78701]
  - iommu: Make set_dev_pasid op support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add iommu_domain_did() to get did (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add pasid replace helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor the pasid setup helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Eder Zulian) [RHEL-78701]
  - iommu: Pass old domain to set_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Eder Zulian) [RHEL-78701]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Separate page request queue from SVM (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused dmar_msi_read (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Increase buffer size for device name (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Use PCI_DEVID() macro (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor first_level_by_default() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused domain_alloc callback (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add domain_alloc_paging support (Eder Zulian) [RHEL-78701]
  - iommu/iova: Fix typo 'adderss' (Eder Zulian) [RHEL-78701]
  - iommu: Restore iommu_flush_iotlb_all() (Eder Zulian) [RHEL-78701]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Create __iommu_alloc_identity_domain() (Eder Zulian) [RHEL-78701]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Implement global identity domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Separate page table setup from domain allocation (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Add new flag to explictly request PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Refactor __iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - media: nvidia: tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - remoteproc: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Eder Zulian) [RHEL-78701]
  - iommu/sysfs: constify the class struct (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_present() (Eder Zulian) [RHEL-78701]
  - iommu: Reorganize kerneldoc parameter names (Eder Zulian) [RHEL-78701]
  - iommu: Make bus_iommu_probe() static (Eder Zulian) [RHEL-78701]
  - iommu: Add a kdoc to iommu_unmap() (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Eder Zulian) [RHEL-78701]
  - dt-bindings: arm-smmu: document QCS615 APPS SMMU (Eder Zulian) [RHEL-78701]
  - dt-bindings: iommu: arm,smmu: Add Qualcomm SAR2130P compatible (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Eder Zulian) [RHEL-78707]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Eder Zulian) [RHEL-78707]
  - iommufd: Lock all IOAS objects (Eder Zulian) [RHEL-78707]
  - iommufd: Export do_update_pinned (Eder Zulian) [RHEL-78707]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Eder Zulian) [RHEL-73584]
  - ACPI/IORT: Support CANWBS memory access flag (Eder Zulian) [RHEL-73584]
  - ACPICA: IORT: Update for revision E.f (Eder Zulian) [RHEL-73584]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Eder Zulian) [RHEL-73584]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Eder Zulian) [RHEL-73591]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Eder Zulian) [RHEL-73591]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Eder Zulian) [RHEL-73591]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Eder Zulian) [RHEL-73591]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add refcount to mock_iommu_device (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add container_of helpers (Eder Zulian) [RHEL-73589]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Eder Zulian) [RHEL-73589]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Eder Zulian) [RHEL-73589]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Eder Zulian) [RHEL-73589]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Eder Zulian) [RHEL-73589]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Eder Zulian) [RHEL-73589]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Eder Zulian) [RHEL-73589]
  - iommufd: Move struct iommufd_object to public iommufd header (Eder Zulian) [RHEL-73589]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Eder Zulian) [RHEL-78707]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: File mappings for mdev (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader for file mappings (Eder Zulian) [RHEL-78707]
  - iommufd: Folio subroutines (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader local variables (Eder Zulian) [RHEL-78707]
  - iommufd: Generalize iopt_pages address (Eder Zulian) [RHEL-78707]
  - iommufd: Rename uptr in iopt_alloc_iova() (Eder Zulian) [RHEL-78707]
  - mm/gup: Add folio_add_pins() (Eder Zulian) [RHEL-78701]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Eder Zulian) [RHEL-78701]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Eder Zulian) [RHEL-78701]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace more error paths (Eder Zulian) [RHEL-78701]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace dma_alloc/free direction (Eder Zulian) [RHEL-78701]
  - dma-mapping: use macros to define events in a class (Eder Zulian) [RHEL-78701]
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Eder Zulian) [RHEL-78701]
  - dma-debug: remove DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - dma-debug: fix a possible deadlock on radix_lock (Eder Zulian) [RHEL-78701] {CVE-2024-47143}
  - selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83555]
  - xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83555]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (Jaroslav Kysela) [RHEL-93495]
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through debug printing (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Notify userspace that guest's AP config changed when mdev removed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Signal eventfd when guest AP configuration is changed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ccw: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Fix indentation in vfio_ap_mdev_ioctl() (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using "struct page" for vsie page (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop messing with page refcount (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using page->index (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85180]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85180]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Switch over to sysfs_emit() (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgste_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgprot_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Use pgprot_val() instead of open coding (Thomas Huth) [RHEL-85180]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-94.el10]
changelog:
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72644]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72644]
  - net: qed: fix typos (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_error_handlers (John Meneghini) [RHEL-72644]
  - scsi: qedf: Constify 'struct bin_attribute' (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72644]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72644]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72644]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72644]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72644]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72644]
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu) [RHEL-78772]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87766]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87766]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Jonathan Wright <jonathan@almalinux.org> - 3.3.0-6.alma.1
changelog:
  - Fix for CVE-2024-12084
  - Fix for CVE-2024-12085
  - Fix for CVE-2024-12086
  - Fix for CVE-2024-12087
  - Fix for CVE-2024-12088
  - Fix for CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Leo Sandoval <lsandova@redhat.com> - 6.04-0.32
changelog:
  - Bump version and include previous resolves ticket number on commit message
  - Resolves: #RHEL-51170


author: Eduard Abdullin <eabdullin@almalinux.org> - 6.04-0.34.alma.2
changelog:
  - Use static syslinux64.exe and syslinux.exe to avoid a difference in the
    checksum in x86_64_v2 arch


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-11
changelog:
  - Add upstream patch to improve error message for --one-top-level
    with absolute path (unsupported as a result of CVE-2025-45582 fix)


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


