# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-259.el10]
changelog:
  - redhat/kernel.spec.template: Switch UKI addons back to 504 cert (Vitaly Kuznetsov) [RHEL-238666]
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235810]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224534]
  - randomize_kstack: Unify random source across arches (Mark Salter) [RHEL-215975]
  - x86/syscall/64: Move 64-bit syscall dispatch code (Mark Salter) [RHEL-215975]
  - randomize_kstack: Maintain kstack_offset per task (Mark Salter) [RHEL-215975]
  - dpll: zl3073x: add NCO virtual input pin (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: add per-DPLL serialization lock (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: use per-operation poll timeouts (CKI Backport Bot) [RHEL-176048]
  - dpll: add DPLL_PIN_TYPE_INT_NCO pin type (CKI Backport Bot) [RHEL-176048]
  - dpll: add STATE_CONNECTED_OVERRIDE pin capability (CKI Backport Bot) [RHEL-176048]
  - netfilter: nft_payload: fix mask build for partial field offload (Florian Westphal) [RHEL-185609]
  - ipvs: clear the nfct flag under lock (Florian Westphal) [RHEL-185609]
  - ipvs: do not mangle ICMP replies for non-first fragments (Florian Westphal) [RHEL-185609]
  - ipvs: fix places with wrong packet offsets (Florian Westphal) [RHEL-185609]
  - ipvs: fix the checksum validations (Florian Westphal) [RHEL-185609]
  - netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: make nft_object rhltable per table (Florian Westphal) [RHEL-185609]
  - ipvs: do not propagate one-packet flag to synced conns (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: do not update comments from kernel-side hash adds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_physdev: masks are not c-strings (Florian Westphal) [RHEL-185609]
  - ipvs: fix more places with wrong ipv6 transport offsets (Florian Westphal) [RHEL-185609]
  - ipvs: reload ip header after head reallocation (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use correct direction to set up tunnel route (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: fix zone comparison in tuple dedup (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (Florian Westphal) [RHEL-185609] {CVE-2026-64554}
  - netfilter: ecache: fix inverted time_after() check (Florian Westphal) [RHEL-185609]
  - netfilter: xt_nat: reject unsupported target families (Florian Westphal) [RHEL-185609]
  - ipvs: ensure inner headers in ICMP errors are in headroom (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in SCTP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in TCP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: pass parsed transport offset to state handlers (Florian Westphal) [RHEL-185609]
  - netfilter: handle unreadable frags (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: support IPIP tunnel with direct xmit (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: IPIP tunnel hardware offload is not yet support (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use dst in this direction when pushing IPIP header (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: allocate the proper memory for the generic hash structure (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: cleanup the add/del backlog when resize failed (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: exclude gc when resize is in progress (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: mark the rcu locked areas properly (Florian Westphal) [RHEL-185609]
  - netfilter: nft_lookup: fix catchall element handling with inverted lookups (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: module names must be null-terminated (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: zero chainstack array (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: terminate table name before find_table_lock() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (Florian Westphal) [RHEL-185609]
  - netfilter: xt_connmark: reject invalid shift parameters (Florian Westphal) [RHEL-185609]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-185609]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: get command skips end element with open interval (Florian Westphal) [RHEL-185609]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates (Florian Westphal) [RHEL-185609]
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_u32: reject invalid shift counts (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict checkum update offset (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict linklayer and network header writes (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_queue: restrict writes to network header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration (Florian Westphal) [RHEL-185609]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: add deprecation warnings for irc and pptp trackers (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-185609]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test (Florian Westphal) [RHEL-185609]
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot (Florian Westphal) [RHEL-185609]
  - netfilter: x_tables.h: fix all kernel-doc warnings (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: use conntrack GC to reap expectations (Florian Westphal) [RHEL-185609]
  - netfilter: nf_reject: skip iphdr options when looking for icmp header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-185609]
  - netfilter: nft_payload: reject offsets exceeding 65535 bytes (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix and simplify IP6IP6 tunnel handling (Florian Westphal) [RHEL-185609]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-185609]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix offloaded ct timeout never being extended (Florian Westphal) [RHEL-185609]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: bail out if forward path cannot be discovered (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register (Florian Westphal) [RHEL-185609] {CVE-2026-53211}
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185609] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185609] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185609] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-185609] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-185609]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185609] {CVE-2026-53220}
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: revert ct extension genid infrastructure (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: add refcounting from datapath (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper (Florian Westphal) [RHEL-185609]
  - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-185609]
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: make ebt_snat ARP rewrite writable (Florian Westphal) [RHEL-185609] {CVE-2026-53266}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185609] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185609] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185609] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185609] {CVE-2026-53269}
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-185609] {CVE-2026-53270}
  - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_ftp: avoid u16 overflows (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo_avx2: restore performance optimization (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_proto_tcp: fix typos in comments (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-185609]
  - netfilter: nfnl_cthelper: apply per-class values when updating policies (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: remove dead conditional (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-185609]
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185609]
  - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() (Mark Salter) [RHEL-184786]
  - arm64/mm: Reject memory removal that splits a kernel leaf mapping (Mark Salter) [RHEL-184786]
  - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Mark Salter) [RHEL-184786]
  - devlink: Fix parent ref leak in devl_rate_node_create() (Petr Oros) [RHEL-179081]
  - devlink: Fix parent ref leak on tc-bw failure (Petr Oros) [RHEL-179081]
  - netdevsim: Add devlink port resource registration (Petr Oros) [RHEL-179081]
  - netdevsim: register a new devlink param with default value interface (Petr Oros) [RHEL-179081]
  - docs: net: fix minor issues with devlink docs (Petr Oros) [RHEL-179081]
  - devlink: Warn on resource ID collision with PARENT_TOP (Petr Oros) [RHEL-179081]
  - devlink: Implement devlink param multi attribute nested data values (Petr Oros) [RHEL-179081]
  - devlink: heap-allocate param fill buffers in devlink_nl_param_fill (Petr Oros) [RHEL-179081]
  - devlink: Release nested relation on devlink free (Petr Oros) [RHEL-179081] {CVE-2026-53261}
  - devlink: pass param values by pointer (Petr Oros) [RHEL-179081]
  - devlink: Document resource scope filtering (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add resource dump and scope filter test (Petr Oros) [RHEL-179081]
  - devlink: Add resource scope filtering to resource dump (Petr Oros) [RHEL-179081]
  - devlink: Document port-level resources and full dump (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add devlink port resource doit test (Petr Oros) [RHEL-179081]
  - devlink: Add port-specific option to resource dump doit (Petr Oros) [RHEL-179081]
  - devlink: Include port resources in resource dump dumpit (Petr Oros) [RHEL-179081]
  - devlink: Add dump support for device-level resources (Petr Oros) [RHEL-179081]
  - devlink: Add port-level resource registration infrastructure (Petr Oros) [RHEL-179081]
  - devlink: Refactor resource functions to be generic (Petr Oros) [RHEL-179081]
  - devlink: Fix incorrect skb socket family dumping (Petr Oros) [RHEL-179081]
  - documentation: networking: add shared devlink documentation (Petr Oros) [RHEL-179081]
  - devlink: introduce shared devlink instance for PFs on same chip (Petr Oros) [RHEL-179081]
  - devlink: allow devlink instance allocation without a backing device (Petr Oros) [RHEL-179081]
  - devlink: add devl_warn() helper and use it in port warnings (Petr Oros) [RHEL-179081]
  - devlink: add devlink_dev_driver_name() helper and use it in trace events (Petr Oros) [RHEL-179081]
  - devlink: introduce __devlink_alloc() with dev driver pointer (Petr Oros) [RHEL-179081]
  - devlink: support index-based notification filtering (Petr Oros) [RHEL-179081]
  - devlink: support index-based lookup via bus_name/dev_name handle (Petr Oros) [RHEL-179081]
  - devlink: allow to use devlink index as a command handle (Petr Oros) [RHEL-179081]
  - devlink: avoid extra iterations when found devlink is not registered (Petr Oros) [RHEL-179081]
  - devlink: add helpers to get bus_name/dev_name (Petr Oros) [RHEL-179081]
  - devlink: expose devlink instance index over netlink (Petr Oros) [RHEL-179081]
  - devlink: Refactor devlink_rate_nodes_check (Petr Oros) [RHEL-179081]
  - devlink: Reverse locking order for nested instances (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix tolerance calculation in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix and clarify TC bandwidth split in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Set shell=True for sysfs writes in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Use Iperf3Runner in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: test devlink default params (Petr Oros) [RHEL-179081]
  - devlink: support default values for param-get and param-set (Petr Oros) [RHEL-179081]
  - devlink: refactor devlink_nl_param_value_fill_one() (Petr Oros) [RHEL-179081]
  - devlink: pass extack through to devlink_param::get() (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_usb driver (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_pciefd driver (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Make command requirements explicit (Petr Oros) [RHEL-179081]
  - i2c: designware: Add ACPI HID for DWAPB I2C controller on FUJITSU-MONAKA (Mark Salter) [RHEL-23132]
  - gpio: dwapb: Add ACPI HID for DWAPB GPIO controller on Fujitsu MONAKA (Mark Salter) [RHEL-23123]
  - new configs in net drivers (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: nxp,s32-dwmac: Use the GPR syscon (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use a syscon for S32_PHY_INTF_SEL_RGMII (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix PTP ref clock for Tegra234 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: pcs: renesas,rzn1-miic: Add RZ/T2H and RZ/N2H support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128151]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128151]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for controlling PCS interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink PCS support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: lynx: support phy-mode = "10g-qxgmii" (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128151]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: Add snps,dwmac-5.00a IP compatible string (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - dt-bindings: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: thead,th1520-gmac: Describe APB interface clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add support for Sophgo SG2044 dwmac (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Add compatible string for RK3528 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Require rockchip,grf and rockchip,php-grf (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add FSD EQoS device tree bindings (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add T-HEAD dwmac support (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: snps,dwmac: add support for Arria10 (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: rearrange register definitions (Izabela Bakollari) [RHEL-100501]
  - net: remove phylink_pcs .neg_mode boolean (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100501]
  - net: pcs: lynx: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove return statements in void function (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_config_usxgmii() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: combine xpcs_link_up_{1000basex,sgmii}() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: replace open-coded mii_bmcr_encode_fixed() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use generic register definitions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Add snps,dwmac-5.30a IP compatible string (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Group GMAC4 compatible check (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100501]
  - stmmac: dwmac-intel-plat: remove redundant dwmac->data check in probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100501]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-260.el10]
changelog:
  - x86/mce: Set up the polling timer before CMCI discovery (Steve Best) [RHEL-239086]
  - scsi: target: Fix hexadecimal CHAP_I handling (Maurizio Lombardi) [RHEL-231666] {CVE-2026-63886}
  - thermal: core: Fix thermal zone device registration error path (Steve Best) [RHEL-226828] {CVE-2026-43332}
  - perf/arm_pmu: Skip PMCCNTR_EL0 on NVIDIA Olympus (Charles Mirabile) [RHEL-176084]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-222582]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222670] {CVE-2026-53329}
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222688] {CVE-2026-53136}
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222698] {CVE-2026-53143}
  - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222746] {CVE-2026-63884}
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222752] {CVE-2026-53356}
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222574] {CVE-2026-64219}
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222626] {CVE-2026-63879}
  - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222650] {CVE-2026-53374}
  - KVM: VMX: Disable CET by default (Aidan Wallace) [RHEL-235002]
  - KVM: VMX: introduce module parameter to disable CET (Aidan Wallace) [RHEL-235002]
  - perf/arm-cmn: Support CMN S3 r2 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Plumb in new filter types (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter data (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter programming (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Rename filter variables for clarity (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Add workarounds for CMN-S3 on Graviton5 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Move DTM index data out of hw_perf_event (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Stop claiming entire iomem region (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix DVM node events (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Reject unsupported hardware configurations (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Support CMN-600AE (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Permit more exhaustive groups (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Jeremy Linton) [RHEL-234652]
  - perf trace: Refactor augmented_raw_syscalls using bpf_for (Trevor Allison) [RHEL-183355]
  - perf trace: Factor out BPF loop body (Trevor Allison) [RHEL-183355]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193253]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193253]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rt5575: Use __le32 for SPI burst write address (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193253]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193253]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193253]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193253]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193253]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193253]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193253]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193253]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193253]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193253]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8189: Fix probe resource cleanup (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193253]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193253] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193253]
  - HID: uhid: convert to hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() (Benjamin Tissoires) [RHEL-170872]
  - HID: Input: Add battery list cleanup with devm action (Benjamin Tissoires) [RHEL-170872]
  - Input: add ABS_SND_PROFILE (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: drop dead NULL check on to_usb_interface() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: reject non-USB transports in probe (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Fix buffer over-read and unaligned access in X12 Tab raw_event handler (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: remove duplicate hid_warn_ratelimited definition (Benjamin Tissoires) [RHEL-170872]
  - HID: u2fzero: free allocated URB on probe errors (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Fix size_t specifier in hid_report_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Add support for newer Bluetooth keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix integer overflow in pidff_rescale (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: add reset quirk for BLTP7853 touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: core: introduce hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires) [RHEL-170872]
  - HID: google: hammer: stop hardware on devres action failure (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: run inactivity autodim from workqueues (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46202}
  - HID: appletb-kbd: fix UAF in inactivity-timer cleanup path (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46213}
  - HID: playstation: Clamp num_touch_reports (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46232}
  - HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: fix OOB write in mcp2221_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: really enable the intended work around for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sjoy: race between init and usage (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Fix regression of input name assignment (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Fix some error codes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: restore OS_TYPE after resume from s2idle (Benjamin Tissoires) [RHEL-170872]
  - HID: elan: Add support for ELAN SB974D touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for Rock Band 3 Pro instruments (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for SMK-Link remotes (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: remove unneeded WARN_ON() in sony_leds_init() (Benjamin Tissoires) [RHEL-170872]
  - HID: ft260: validate i2c input report length (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix incorrect force-feedback check in sony_suspend() (Benjamin Tissoires) [RHEL-170872]
  - HID: core: clamp report_size in s32ton() to avoid undefined shift (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31624}
  - HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Enable rumble effects (Benjamin Tissoires) [RHEL-170872]
  - HID: core: do not allow parsing 0-sized reports (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: refactor endpoint lookup (Benjamin Tissoires) [RHEL-170872]
  - HID: huawei: fix CD30 keyboard report descriptor issue (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: validate num_touch_reports in DualShock 4 reports (Benjamin Tissoires) [RHEL-170872]
  - HID: drop 'default !EXPERT' from tristate symbols (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: fix deadlock in hid_post_reset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-53037}
  - HID: apple: ensure the keyboard backlight is off if suspending (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (Benjamin Tissoires) [RHEL-170872]
  - HID: alps: fix NULL pointer dereference in alps_raw_event() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31625}
  - HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Standardise hid_report_enum variable nomenclature (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: update module description (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check bounds when deleting force-feedback effects (Benjamin Tissoires) [RHEL-170872]
  - Docs: hid: intel-ish-hid: make long URL usable (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: sony: add battery status support for Rock Band 4 PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix style issues (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: update hid-sony supported devices (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for more instruments (Benjamin Tissoires) [RHEL-170872]
  - bpf: Add fix for Trust Philips SPK6327 (145f:024b) modifier keys (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Huion KeyDial K20 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add a BPF to get the touchpad type (Benjamin Tissoires) [RHEL-170872]
  - hid: bpf: hid_bpf_helpers: add helper for having read/write udev properties (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: handle injected report descriptor in HID-BPF (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add helper macros for LE/BE conversion (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: hid_bpf_helpers: provide a cleanup functions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix some signed vs unsigned compiler warnings (Benjamin Tissoires) [RHEL-170872]
  - Input: add keycodes for contextual AI usages (HUTRR119) (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-thc: Add more frequency support for SPI (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Improve power management for touch devices (Benjamin Tissoires) [RHEL-170872]
  - HID: core: use __free(kfree) and __free(kvfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_parse_collections() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: fix LEDS dependencies (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add support for multiple batteries per device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Introduce struct hid_battery and refactor battery code (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Convert battery code to devm_* (Benjamin Tissoires) [RHEL-170872]
  - HID: input: use __free(kfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Fix spelling mistake "Enfore" -> "Enforce" (Benjamin Tissoires) [RHEL-170872]
  - HID: pl: eliminate private debug macro (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Add module parameter to enfoce GPIO mode (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Fix spelling mistake "configuratiion" -> "configuration" (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add IMU and Touchpad RO Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Touchpad Mode Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add MCU ID Attribute (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Lenovo Legion Go S Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: Include firmware version in the uevent (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add OS Mode Toggle (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Calibration Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add FPS Mode DPI settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Rumble and Haptic Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Lenovo Legion Go Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: use mcp_i2c_smbus_read for block reads (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: elan: Add parade-tc3408 timing (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_DEADBAND quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_SATURATION quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_COEFFICIENT quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Refactor field quirks detection (Benjamin Tissoires) [RHEL-170872]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Benjamin Tissoires) [RHEL-170872]
  - HID: Kysona: Add support for VXE Dragonfly R1 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: roccat: fix use-after-free in roccat_report_event (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43111}
  - HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Check to ensure report responses match the request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43047}
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43049}
  - HID: bpf: prevent buffer overflow in hid_hw_request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31401}
  - selftests/hid: fix compilation when bpf_wq and hid_device are not exported (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Mitigate potential OOB by removing bogus memset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43048}
  - HID: intel-thc-hid: Set HID_PHYS with PCI BDF (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: add .resume method in PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Enable MX Master 4 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Drop Asus UX550* touchscreen ignore battery quirks (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: cancel last I2C command on read error (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Keep latency normal on deactivate for reactivation gesture (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - selftests: hid: tests: test_wacom_generic: add tests for display devices and opaque devices (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: new class MT_CLS_EGALAX_P80H84 (Benjamin Tissoires) [RHEL-170872]
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Benjamin Tissoires) [RHEL-170872]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses (Benjamin Tissoires) [RHEL-170872]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Benjamin Tissoires) [RHEL-170872]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix condition effect bit clearing (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23349}
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Benjamin Tissoires) [RHEL-170872]
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23382}
  - HID: asus: avoid memory leak in asus_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31524}
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31522}
  - HID: apple: avoid memory leak in apple_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31520}
  - HID: Document memory allocation properties of report_fixup() (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add dongle device IDs for CRKD Gibson SG (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register fields updating (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Benjamin Tissoires) [RHEL-170872 RHEL-183865] {CVE-2026-45877}
  - HID: logitech-hidpp: Add support for Logitech K980 (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Differentiate "invalid device index" error (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sensor-hub: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: picolcd_core: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add eGalaxTouch EXC3188 support (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Add FocalTech FT8112 (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for bluetooth Rock Band 4 PS4 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43136}
  - HID: prodikeys: Check presence of pm->input_ep82 (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43251}
  - HID: magicmouse: Do not crash on missing msc->input (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43140}
  - HID: sony: add support for Rock Band 4 PS4 and PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-pl: handle probe errors (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43152}
  - HID: pidff: Do not set out of range trigger button (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add quirks for Lenovo Yoga Book 9i (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add missing check for input_ff_create_memless (Benjamin Tissoires) [RHEL-170872] {CVE-2026-45969}
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: rapoo: Add support for side buttons on RAPOO 0x2015 mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech: add HID++ support for Logitech MX Anywhere 3S (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Filter spurious HID vendor codes on ROG laptops (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Replace magic number with HID_UP_ASUSVENDOR constant (Benjamin Tissoires) [RHEL-170872]
  - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: work around VID/PID conflict for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-quicki2c: Add power management for touch device (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add output report support (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Support writing output report format (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use put_unaligned_le16 for __le16 writes (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use size_t for all length variables (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23178}
  - selftests/hid: add a test for the Digitizer/Button Type pressurepad (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: use a enum class for the different button types (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: require hidtools 0.12 (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: set INPUT_PROP_PRESSUREPAD based on Digitizer/Button Type (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23196}
  - hid: intel-thc-hid: Select SGL_ALLOC (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: fix bpf compilations due to -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix bpf compilation with -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: drop dead NULL checks in kfuncs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register reading (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Center initial joystick axes to prevent spurious events (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires) [RHEL-170872]
  - drivers: hid: renegotiate resolution multipliers with device after reset (Benjamin Tissoires) [RHEL-170872]
  - HID: evision: Fix Report Descriptor for Evision Wireless Receiver 320f:226f (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Fix probe failure when used with KVM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Remove duplicate error logging (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for G Pro X Superlight 2 receiver (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid-tablet: add ABS_DISTANCE test for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix typo in HID usage table (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add the Huion Kamvas 27 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add heuristics to the Huion Inspiroy 2S eraser button (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for XP-Pen Deco02 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the XP-Pen Deco 01 V3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Waltop Batteryless Tablet (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add fixup for Logitech SpaceNavigator variants (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: support for Huion Kamvas 16 Gen 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add support for Huion Kamvas 13 (Gen 3) (model GS1333) (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Inspiroy 2M (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix needs_playback check (Benjamin Tissoires) [RHEL-170872]
  - HID: corsair-void: Use %pe for printing PTR_ERR (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Improve Orion2 throttle support (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Format DataByte* subsection headings (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Fix packet format section headings (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: add WQ_PERCPU to alloc_workqueue users (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Reduce JC_SUBCMD_RATE_MAX_ATTEMPTS (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-input: Extend Elan ignore battery quirk to USB (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: Stop sensor before starting (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Remove redundant pm_runtime_mark_last_busy() calls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: add tests for missing release on the Dell Synaptics (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-debug: Fix spelling mistake "Rechargable" -> "Rechargeable" (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Fix build error from CONFIG_HID_HAPTIC (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Add support for the XP-PEN Artist 24 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Rate limit IMU compensation message (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Silence protocol errors on newer lightspeed receivers (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for a new lightspeed receiver iteration (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Add hw_brightness_changed support for the G510 keyboard (Benjamin Tissoires) [RHEL-170872]
  - HID: cp2112: Add parameter validation to data length (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: Fix wrong type casting (Benjamin Tissoires) [RHEL-170872]
  - HID: lg-g15 - Add support for Logitech G13. (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Switch to scoped_guard() in {dualsense|dualshock4}_output_worker() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Silence sparse warnings for locking context imbalances (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Update SP preamp gain comment line (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced features (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Change hid_driver to use a const char* for name (Benjamin Tissoires) [RHEL-170872]
  - HID: hidraw: tighten ioctl command parsing (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: forge wrong ioctls and tests them (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: add more coverage for hidraw ioctls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: update vmtest.sh for virtme-ng (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack event reporting (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack hotplug detection (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Redefine DualSense input report status field (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Prefer kzalloc(sizeof(*buf)...) (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Document spinlock_t usage (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Fix all alignment and line length issues (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Correct spelling in comment sections (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Replace uint{32,16,8}_t with u{32,16,8} (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Simplify locking with guard() and scoped_guard() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add spaces around arithmetic operators (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Make use of bitfield macros (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add haptic multitouch support (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add hid_haptic_switch_mode (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add functions handling events (Benjamin Tissoires) [RHEL-170872]
  - HID: input: calculate resolution for pressure (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: initialize haptic device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: allow mapping of haptic output (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: introduce hid_haptic_device (Benjamin Tissoires) [RHEL-170872]
  - Input: add FF_HAPTIC effect type (Benjamin Tissoires) [RHEL-170872]
  - HID: add haptics page defines (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix possible null pointer dereference (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: rescan the device for the group after a load/unload (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_set_group() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Fix test in i2c_hid_core_register_panel_follower() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Make elan touch controllers power on after panel is enabled (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Reduce PID_EFFECT_OPERATION spam (Benjamin Tissoires) [RHEL-170872]
  - HID: universal-pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Define all cardinal directions (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove Anssi's email address from info msg (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Separate check for infinite duration (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Rework pidff_upload_effect (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Update debug messages (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add support for AXES_ENABLE field (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Simplify HID field/usage searching logic (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Better quirk assigment when searching for fields (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Treat PID_REQUIRED_REPORTS as count, not max (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Use ARRAY_SIZE macro instead of sizeof (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unneeded debug (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unhelpful pidff_set_actuators helper (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Use standard multicolor LED API (Benjamin Tissoires) [RHEL-170872]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-261.el10]
changelog:
  - mm/util: don't read __page_2 for order-1 folios in snapshot_page() (Luiz Capitulino) [RHEL-214116]
  - selftests: tls: size splice_short pipe by page size (Valentin Schneider) [RHEL-153139]
  - selftests: tls: use ASSERT_GE in test_mutliproc (Valentin Schneider) [RHEL-153139]
  - selftests: tls: add test for data loss on small pipe (Valentin Schneider) [RHEL-153139]
  - perf/aux: Fix page UAF in map_range() (Michael Petlan) [RHEL-218473] {CVE-2026-64300}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - perf build-id: Fix off-by-one bug when printing kernel/module build-id (Marek Pazur) [RHEL-122642]
  - arm_mpam: guard MBWU state before adding it to garbage (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix MPAMCFG_MBW_PBM register setting (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix software reset values of MPAMCFG_PRI (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix use-after-free during unmount (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (Jeremy Linton) [RHEL-218644]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Update architecture version check for MPAM MSC (Jeremy Linton) [RHEL-218644]
  - arm64: cpufeature: Add support for the MPAM v0.1 architecture version (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Check whether the config array is allocated before destroying it (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix false positive assert failure during mpam_disable() (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Improve check for whether or not NRDY is hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Pretend that NRDY is always hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix monitor instance selection when checking for hardware NRDY (Jeremy Linton) [RHEL-218644]
  - arm64: dts: imx8dxl-ss-conn: delete usb3_lpcg node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8dxl-ss-conn: Disable USB3 nodes (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add RNG node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am625: Add OLDI support (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add support for AM625 OLDI IO Control (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add missed clock enet_2x_txclk for fec[1,2] (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add fsl,tuning-step for usdhc1 and usdhc2 (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8: add default clock rate for usdhc (Steve Dunnagan) [RHEL-213310]
  - crypto: iaa - fix per-node CPU counter reset in rebalance_wq_table() (Eder Zulian) [RHEL-213821]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213821]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213821]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213821]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213821]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180091] {CVE-2026-46145}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-262.el10]
changelog:
  - smb: client: Fix use-after-free in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-235460]
  - smb/client: show compress mount option (Paulo Alcantara) [RHEL-235460]
  - netfs: Fix folio_queue ENOMEM in writeback by adding a mempool (Paulo Alcantara) [RHEL-235460]
  - netfs: release readahead folios on iterator preparation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: handle single writeback rolling buffer allocation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: clear PG_private_2 on copy-to-cache append failure (Paulo Alcantara) [RHEL-235460]
  - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-235460]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235460]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235460]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-235460]
  - smb: client: free partially allocated transform folio queue (Paulo Alcantara) [RHEL-235460]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-235460]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-235460]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-235460]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-235460]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235460]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235460]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-235460]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-235460]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-235460]
  - cifs: Remove CIFSSMBSetPathInfoFB() fallback function (Paulo Alcantara) [RHEL-235460]
  - cifs: Fix and improve cifs_is_path_accessible() function (Paulo Alcantara) [RHEL-235460]
  - cifs: Show reason why autodisabling serverino support (Paulo Alcantara) [RHEL-235460]
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224341]
  - redhat/configs: automotive: disable CONFIG_MD (Jared Kangas) [RHEL-237678]
  - mm/gup: fix GUP-fast fallback for NULL-mapping order-0 folios (Rafael Aquini) [RHEL-231964]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227851] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227851] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227851]
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227851]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227851]
  - drm/xe: gate observation streams with perf_allow_cpu() (Michael Petlan) [RHEL-212122]
  - perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Michael Petlan) [RHEL-212122]
  - memfd: deny writeable mappings when implying SEAL_WRITE (CKI Backport Bot) [RHEL-228530] {CVE-2026-63952}
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191041] {CVE-2026-53195}
  - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191041] {CVE-2026-53196}
  - drm/panel: Clean up S6E3FC2X01 config dependencies (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Karol Herbst) [RHEL-180328]
  - drm/bridge: dw-hdmi-qp: Provide HDMI Vendor Specific InfoFrame (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: update used tracking kernel-doc (Karol Herbst) [RHEL-180328]
  - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (Karol Herbst) [RHEL-180328]
  - drm/ttm/tests: add a test to exercise ttm_bo_swapout (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix EAGAIN sign in pf_migration_consume() (Karol Herbst) [RHEL-180328]
  - Revert "drm/nouveau/gsp: add support for GA100" (Karol Herbst) [RHEL-180328]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix MMIO access using PF view instead of VF view during migration (Karol Herbst) [RHEL-180328]
  - drm/i915/display: enable ccs modifiers on dg2 (Karol Herbst) [RHEL-180328]
  - drm/xe/wa: Drop redundant entries for Wa_16021867713 & Wa_14019449301 (Karol Herbst) [RHEL-180328]
  - drm/xe/xe3p_xpc: Drop stale MCR steering TODO comment (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix redundant MQD iterations in GFX v12.1 (Karol Herbst) [RHEL-180328]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Karol Herbst) [RHEL-180328]
  - dma-fence: Silence sparse warning in dma_fence_describe (Karol Herbst) [RHEL-180328]
  - drm/hisilicon/hibmc: add updating link cap in DP detect() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() (Karol Herbst) [RHEL-180328]
  - Revert "drm/amdgpu: Init mcm_addr look up table" (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: fix kernel-doc warning for ras_eeprom_append() (Karol Herbst) [RHEL-180328]
  - drm/xe/xe_pagefault: Disallow writes to read-only VMAs (Karol Herbst) [RHEL-180328]
  - Revert "i915: don't use a vma that didn't match the context VM" (Karol Herbst) [RHEL-180328]
  - drm/drm_atomic: duplicate colorop states if plane color pipeline in use (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix kernel-doc warning for smu_msg_v1_send_msg() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix kernel-doc warning for amdgpu_ttm_alloc_mmio_remap_bo() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: remove gart_window_lock usage from gmc v12_1 (Karol Herbst) [RHEL-180328]
  - drm/sched: Remove racy hack from drm_sched_fini() (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Karol Herbst) [RHEL-180328]
  - drm/nouveau/gsp: add support for GA100 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Karol Herbst) [RHEL-180328]
  - drm/xe: Clear pending_disable before signaling suspend fence (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Karol Herbst) [RHEL-180328]
  - drm/xe/display: fix oops in suspend/shutdown without display (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Karol Herbst) [RHEL-180328]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Karol Herbst) [RHEL-180328]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject DMA commands with uninitialized length (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix arithmetic issues in dma_length() (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Karol Herbst) [RHEL-180328]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds checks for firmware log indices (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds check for firmware runtime memory (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Karol Herbst) [RHEL-180328]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Karol Herbst) [RHEL-180328]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Karol Herbst) [RHEL-180328]
  - drm/atomic: track individual colorop updates (Karol Herbst) [RHEL-180328]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Karol Herbst) [RHEL-180328]
  - drm/colorop: Remove read-only comments from interpolation fields (Karol Herbst) [RHEL-180328]
  - drm/virtio: Fix driver removal with disabled KMS (Karol Herbst) [RHEL-180328]
  - drm/i915/edp: Check supported link rates DPCD read (Karol Herbst) [RHEL-180328]
  - drm/hyperv: During panic do VMBus unload after frame buffer is flushed (Karol Herbst) [RHEL-180328]
  - Drivers: hv: vmbus: Provide option to skip VMBus unload on panic (Karol Herbst) [RHEL-180328]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Karol Herbst) [RHEL-180328]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Karol Herbst) [RHEL-180328]
  - drm/gem: fix race between change_handle and handle_delete (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate VMBus packet size in receive callback (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Read Intel DPCD workaround register (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Karol Herbst) [RHEL-180328]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Karol Herbst) [RHEL-180328]
  - drm/i915/aux: use polling when irqs are unavailable (Karol Herbst) [RHEL-180328]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Karol Herbst) [RHEL-180328]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Karol Herbst) [RHEL-180328]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix CFI failure in debugfs access (Karol Herbst) [RHEL-180328]
  - drm/xe/vf: Fix signature of print functions (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Karol Herbst) [RHEL-180328]
  - drm/gem: Make the GEM LRU lock part of drm_device (Karol Herbst) [RHEL-180328]
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Karol Herbst) [RHEL-180328]
  - drm/bridge: megachips: remove bridge when irq request fails (Karol Herbst) [RHEL-180328]
  - drm/bridge: it66121: acquire reset GPIO in probe (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: Fix secondary queue error case (Karol Herbst) [RHEL-180328]
  - drm/virtio: use uninterruptible resv lock for plane updates (Karol Herbst) [RHEL-180328]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Karol Herbst) [RHEL-180328]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Karol Herbst) [RHEL-180328]
  - drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-180328]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Karol Herbst) [RHEL-180328]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Karol Herbst) [RHEL-180328]
  - drm: Replace old pointer to new idr (Karol Herbst) [RHEL-180328]
  - drm/loongson: Use managed KMS polling (Karol Herbst) [RHEL-180328]
  - drm/xe/xelp: Fix Wa_18022495364 (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Karol Herbst) [RHEL-180328]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Karol Herbst) [RHEL-180328]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Karol Herbst) [RHEL-180328]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Karol Herbst) [RHEL-180328]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow embedded connectors without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Karol Herbst) [RHEL-180328]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Karol Herbst) [RHEL-180328]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Karol Herbst) [RHEL-180328]
  - drm/i915/wm: Verify the correct plane DDB entry (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Karol Herbst) [RHEL-180328]
  - drm/fb-helper: Fix a locking bug in an error path (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Karol Herbst) [RHEL-180328]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Karol Herbst) [RHEL-180328]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Karol Herbst) [RHEL-180328]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add default case in DVI mode validation (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Update queue properties for metadata ring (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Fix xgmi max speed reporting (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix type size of remainder argument (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Removed commented line for MQD queue priority (Karol Herbst) [RHEL-180328]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Karol Herbst) [RHEL-180328]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Karol Herbst) [RHEL-180328]
  - dma-fence: Fix sparse warnings due __rcu annotations (Karol Herbst) [RHEL-180328]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Karol Herbst) [RHEL-180328]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Karol Herbst) [RHEL-180328]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Karol Herbst) [RHEL-180328]
  - drm/radeon: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm: Set old handle to NULL before prime swap in change_handle (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-180328]
  - drm/udl: Increase GET_URB_TIMEOUT (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Karol Herbst) [RHEL-180328]
  - drm/appletbdrm: Use kvzalloc for big allocations (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce: Prevent partial address patches (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Karol Herbst) [RHEL-180328]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Karol Herbst) [RHEL-180328]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Karol Herbst) [RHEL-180328]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Karol Herbst) [RHEL-180328]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Karol Herbst) [RHEL-180328]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Add affected colorops with affected planes (Karol Herbst) [RHEL-180328]
  - drm/colorop: Preserve bypass value in duplicate_state() (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Karol Herbst) [RHEL-180328]
  - drm/imagination: Fix segfault when updating ftrace mask (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Karol Herbst) [RHEL-180328]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Karol Herbst) [RHEL-180328]
  - drm/arcpgu: fix device node leak (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: replace PASID IDR with XArray (Karol Herbst) [RHEL-180328]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178409] {CVE-2026-43501}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (CKI Backport Bot) [RHEL-174787] {CVE-2026-43341}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172518] {CVE-2026-31786}
  - Revert "ext4: switch to using the crc32c library" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove redundant function ext4_has_metadata_csum" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sbi argument from ext4_chksum()" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sb argument from ext4_superblock_csum()" (Brian Foster) [RHEL-159116]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-263.el10]
changelog:
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504]
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226716] {CVE-2026-43493}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231458] {CVE-2026-64277}
  - iommu/vt-d: Avoid WARNING in sva unbind path (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add invalidation entry_num and entry_len boundary tests (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Cover invalid read counts on vEVENTQ FD (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add boundary tests for veventq_depth (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Clarify IOAS_MAP_FILE dma-buf support (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Destroy the pages content after detaching from dmabuf (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set veventq_depth upper bound (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Move vevent memory allocation outside spinlock (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Fix the end_index calculation in __map_range_leaf() (Jerry Snitselaar) [RHEL-213791]
  - iommu: Handle unmap error when iommu_debug is enabled (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64152}
  - iommu: Fix up map/unmap debugging for iommupt domains (Jerry Snitselaar) [RHEL-213791]
  - iommu: Fix loss of errno on map failure for classic ops (Jerry Snitselaar) [RHEL-213791]
  - iommu: Ensure .iotlb_sync is called correctly (Jerry Snitselaar) [RHEL-213791]
  - iommu: Do not call drivers for empty gathers (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64151}
  - iommu/vt-d: Restore IOMMU_CAP_CACHE_COHERENCY (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Always allow DMA-FQ when iommupt provides the iommu_domain (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Avoid rewalking during map (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Directly call iommupt's unmap_range() (Jerry Snitselaar) [RHEL-213791]
  - iommu/iova: Add NULL check in iova_magazine_free() (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Optimize the gather processing for DMA-FQ mode (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64186}
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix illegal device-id access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param (Jerry Snitselaar) [RHEL-213791]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53164}
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix data_len byte-count vs element-count mismatch (Jerry Snitselaar) [RHEL-213791]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix premature break in init_iommu_one() (Jerry Snitselaar) [RHEL-213791]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53283}
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Jerry Snitselaar) [RHEL-213791]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Jerry Snitselaar) [RHEL-213791]
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: move dma_map_resource() sanity check into debug code (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64149}
  - iommu/amd: Fix precedence order in set_dte_passthrough() (Jerry Snitselaar) [RHEL-213791]
  - iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix a race with concurrent allocation and unmap (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Jerry Snitselaar) [RHEL-213791]
  - iommufd: vfio compatibility extension check for noiommu mode (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-213791]
  - x86/sev: Fix broken SNP support with KVM module built-in (Jerry Snitselaar) [RHEL-213791]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-213791]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-213791]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Jerry Snitselaar) [RHEL-213791]
  - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210962] {CVE-2025-21834}
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-117335]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115124] {CVE-2026-43079}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115124] {CVE-2026-43344}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115124]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117335]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115120 RHEL-117335]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-117337]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115122]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120357]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95668]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188220] {CVE-2026-52923}
  - KVM: arm64: account pKVM reclaim against the VM mm (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Set IL in fake ESR for pKVM memory sharing exit (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Initialize parser_state before pgtable walk (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Expose shadow page tables in debugfs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Make KVM ptdump code s2 mmu aware (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore S1PIE register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore TCR2_EL1 register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename PKVM_PAGE_STATE_MASK (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest hvcs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover forced reclaim (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Register 'selftest_vm' in the VM table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest donation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add some initial documentation for pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_UNSHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_SHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add hvc handler at EL2 for hypercalls from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Return -EFAULT from VCPU_RUN on access to a poisoned pte (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reclaim faulting page from pKVM in spurious fault handler (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce hypercall to force reclaim of a protected page (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fully update VNCR fixmap state in kvm_translate_vncr() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Inject SEA TTW when desc update can't write to GPA (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Restart stage-1 walk if stage-2 desc update fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't pass host_debug_state to BRBE world-switch routines (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest donate (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest share (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make EL2 exception entry and exit context-synchronization events (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Annotate guest donations with handle and gfn in host stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Change 'pkvm_handle_t' to u16 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce host_stage2_set_owner_metadata_locked() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Generalise kvm_pgtable_stage2_set_owner() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid pointless annotation when mapping host-owned pages (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Inject SIGSEGV on illegal accesses (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Support translation faults in inject_host_exception() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Factor out pKVM host exception injection logic (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up reclaim hypercall to pkvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_reclaim_dying_guest_page() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't advertise unsupported features for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix block mapping validity check in stage-1 walker (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly identify executable PTEs at stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restore POR_EL0 access to host EL0 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restart instruction upon race in __kvm_at_s12() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wire AT S1E1A in the system instruction handling table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Key CPTR_EL2.E0POE propagation on FEAT_S1POE (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __pkvm_init_vm error path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reset page order in pKVM hyp_pool (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle permission faults with guest_memfd (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle aborts from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_host_donate_guest() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove unused PKVM_ID_FFA definition (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove is_protected_kvm_enabled() checks from hypercalls (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Expose self-hosted debug regs as RAZ/WI for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up donation hypercall to pkvm_pgtable_stage2_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Split teardown hypercall into two phases (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename __pkvm_pgtable_stage2_unmap() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move handle check into pkvm_pgtable_stage2_destroy_range() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore -EAGAIN when mapping in pages for the pKVM host (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Prevent unsupported memslot operations on protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore MMU notifier callbacks for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Convert gmem_abort() to struct kvm_s2_fault_desc (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify integration of adjust_nested_*_perms() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Directly expose mapping prot and kill kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move device mapping management into kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace force_pte with a max_map_size attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move kvm_s2_fault.{pfn,page} to kvm_s2_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restrict the scope of the 'writable' attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill logging_active from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move VMA-related information to kvm_s2_fault_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill topup_memcache from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill exec_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill write_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Constrain fault_granule to kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace fault_is_perm with a helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move fault context to const structure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make fault_ipa immutable (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill fault->ipa (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clean up control flow in kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hoist MTE validation check out of MMU lock path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Optimize early exit checks in kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Initialize struct kvm_s2_fault completely at declaration (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify return logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove redundant state variables from struct kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify nested VMA shift calculation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract page table mapping in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract stage-2 permission logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Isolate mmap_read_lock inside new kvm_s2_fault_get_vma_info() helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract PFN resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce struct kvm_s2_fault to user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract VMA size resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix typo in feature check comments (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak stage-2 page-table if VM fails to init under pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Read PMUVer as unsigned (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Use pmuv3_implemented() function (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (Sebastian Ott) [RHEL-180320]
  - selftests/cgroup: include slab in test_percpu_basic memory check (Waiman Long) [RHEL-154159]
  - selftests/cgroup: fix hardcoded page size in test_percpu_basic (Waiman Long) [RHEL-154159]
  - selftests/cgroup: test_zswap: wait for asynchronous writeback (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap attempt_writeback() on 64K pagesize system (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap test_no_invasive_cgroup_shrink on large pagesize system (Waiman Long) [RHEL-154157]
  - selftests/cgroup: replace hardcoded page size values in test_zswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: rename PAGE_SIZE to BUF_SIZE in cgroup_util (Waiman Long) [RHEL-154157]
  - selftests/cgroup: use runtime page size for zswpin check (Waiman Long) [RHEL-154157]
  - selftests/cgroup: avoid OOM in test_swapin_nozswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: skip test_zswap if zswap is globally disabled (Waiman Long) [RHEL-154157]
  - selftests/cgroup: Fix error path leaks in test_percpu_basic (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix string comparison in write_test (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix cg_read_strcmp() empty string comparison (Waiman Long) [RHEL-184801]
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long) [RHEL-184801]
  - selftests: cgroup: make test_memcg_sock robust against delayed sock stats (Waiman Long) [RHEL-184801]
  - selftests: cgroup: Add cg_read_key_long_poll() to poll a cgroup key with retries (Waiman Long) [RHEL-184801]
  - selftests: complete kselftest include centralization (Waiman Long) [RHEL-184801]
  - selftests/cgroup: conform test to KTAP format output (Waiman Long) [RHEL-184801]
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long) [RHEL-184801]
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long) [RHEL-184801]
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Waiman Long) [RHEL-184801]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Antoine Tenart) [RHEL-152712]
  - ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152712]
  - ipv6: anycast: insert aca into global hash under idev->lock (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152712]
  - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152712]
  - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Antoine Tenart) [RHEL-152712]
  - ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Antoine Tenart) [RHEL-152712]
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152712]
  - ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152712]
  - ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152712]
  - ipv6: update route serial number on NETDEV_CHANGE (Antoine Tenart) [RHEL-152712]
  - ipv6: Implement limits on extension header parsing (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152712]
  - net: ioam6: fix OOB and missing lock (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152712]
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152712]
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Antoine Tenart) [RHEL-152712]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152712]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712] {CVE-2026-43186}
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Antoine Tenart) [RHEL-152712]
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Antoine Tenart) [RHEL-152712]
  - ipv6: annotate data-race in ndisc_router_discovery() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152712]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-264.el10]
changelog:
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808]
  - net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808]
  - ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808]
  - accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446}
  - accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328}
  - accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424}
  - accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280}
  - accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288}
  - accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295}
  - accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341}
  - accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908}
  - accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980}
  - accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931}
  - accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308}
  - accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303}
  - accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546]
  - drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731}
  - accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546]
  - drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546]
  - drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546]
  - drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546]
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458]
  - redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943]
  - rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113}
  - tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180]
  - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031]
  - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669}
  - net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212]
  - net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212]
  - net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212]
  - net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212]
  - l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732]
  - l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732]
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724]
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736]
  - seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736]
  - seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736]
  - seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736]
  - seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 7:6.1.0-2
changelog:
  - Rebuild for Go and security fixes
  - Resolves: RHEL-190079, RHEL-190852, RHEL-241124, RHEL-241361, RHEL-241463, RHEL-241829, RHEL-241930, RHEL-242162


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176547


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 16.14-2
changelog:
  - Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
  - Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
  - Backport SSLerrmessageExt() helper for improved error reporting
  - Update GUC description to document colon-separated group list support
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 16.14-3
changelog:
  - Add SSL test coverage for colon-separated ssl_ecdh_curve group list
  - Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Attila Lakatos <alakatos@redhat.com> - 4.2.1-1
changelog:
  - Rebase to 4.2.1
  - Revert /run/audit/ migration (selinux-policy not yet updated, RHEL-224026)
    Resolves: RHEL-172047
  - Prevent netlink congestion causing ENOBUFS errors under heavy file system activity
    Resolves: RHEL-102929
  - Fix auditctl -h printing spurious error message
    Resolves: RHEL-185097


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.0-8
changelog:
  - Accept output_buffer_limit as an alias for max_output_length
    in Decompressor.process() for forward compatibility with upstream 1.2.0
  - Resolves: RHEL-221151


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 6.2.1.11-3.git4b3e853
changelog:
  - Fix IQN name validation (CVE-2026-44943)
  - Fix iscsiuio control-socket credential verification (CVE-2026-44944)


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.3.4-2
changelog:
  - Fix issues identified via Coverity static analysis
  - Fix test_validate_transcendentals skip to match SVML dispatch
  - Fix signed overflow issue in npy_gcd for INT_MIN on s390x
  - Enable CET hardware protections
  - Fixes: RHEL-137130, RHEL-161528, RHEL-160066, RHEL-238378


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-19
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174858]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174858]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174858]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174858]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174858]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174858]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174858]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174858]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174858]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174858]
  - kvm-hw-pci-host-gpex-acpi-Fix-_DSM-function-0-support-re.patch [RHEL-138494]
  - kvm-vfio-scsi-ui-Error-check-qio_channel_socket_connect_.patch [RHEL-138494]
  - kvm-vfio-igd-Enable-quirks-when-IGD-is-not-the-primary-d.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-amd-xgbe-device.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-calxeda-xgmac-device.patch [RHEL-138494]
  - kvm-hw-arm-virt-Include-system-system.h.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-platform.patch [RHEL-138494]
  - kvm-vfio-Move-vfio-region.h-under-hw-vfio.patch [RHEL-138494]
  - kvm-vfio-container-set-error-on-cpr-failure.patch [RHEL-138494]
  - kvm-vfio-Report-an-error-when-the-dma_max_mappings-limit.patch [RHEL-138494]
  - kvm-hw-vfio-user-add-x-pci-class-code.patch [RHEL-138494]
  - kvm-vfio-Introduce-helper-vfio_pci_from_vfio_device.patch [RHEL-138494]
  - kvm-vfio-vfio-container-base.h-update-VFIOContainerBase-.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-update-VFIOContainer-declarati.patch [RHEL-138494]
  - kvm-hw-vfio-cpr-legacy.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-rename-VFIOContainer-bcontaine.patch [RHEL-138494]
  - kvm-vfio-user-container.h-update-VFIOUserContainer-decla.patch [RHEL-138494]
  - kvm-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-container.h-rename-VFIOUserContainer-bcont.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-update-VFIOUserPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-VFIOUserPCIDevice-device-fiel.patch [RHEL-138494]
  - kvm-vfio-pci.h-update-VFIOPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-pci-quirks.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-igd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-pci.h-rename-VFIOPCIDevice-pdev-field-to-parent.patch [RHEL-138494]
  - kvm-treewide-handle-result-of-qio_channel_set_blocking.patch [RHEL-138494]
  - kvm-vfio-pci-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-vfio-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-VFIOContaine.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-VFIOCon.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-file-to-vfio.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-file-to.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-rename-file-to-container-legacy..patch [RHEL-138494]
  - kvm-hw-vfio-container-base.c-rename-file-to-container.c.patch [RHEL-138494]
  - kvm-vfio-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-iommufd.h-rename-VFIOContainer-bcontainer-.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-spapr.c-rename-VFIOContainer-bcontainer-field-t.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_init-to-vfio_pci_ini.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_finalize-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_class_init-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_info-to-vfio_pci_info.patch [RHEL-138494]
  - kvm-s390x-s390-pci-vfio.c-use-QOM-casts-where-appropriat.patch [RHEL-138494]
  - kvm-hw-vfio-types.h-rename-TYPE_VFIO_PCI_BASE-to-TYPE_VF.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_class_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_info-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_properties-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_nohotplug_properties-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_properties-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_finalize-t.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-device.h-fix-include-header-gua.patch [RHEL-138494]
  - kvm-vfio-Remove-workaround-for-kernel-DMA-unmap-overflow.patch [RHEL-138494]
  - kvm-system-iommufd-Use-uint64_t-type-for-IOVA-mapping-si.patch [RHEL-138494]
  - kvm-hw-vfio-Reorder-vfio_container_query_dirty_bitmap-tr.patch [RHEL-138494]
  - kvm-hw-vfio-Avoid-ram_addr_t-in-vfio_container_query_dir.patch [RHEL-138494]
  - kvm-hw-vfio-Use-uint64_t-for-IOVA-mapping-size-in-vfio_c.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_subsection_lo.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_load_state.patch [RHEL-138494]
  - kvm-migration-Remove-error-variant-of-vmstate_save_state.patch [RHEL-138494]
  - kvm-migration-multi-mode-notifier.patch [RHEL-138494]
  - kvm-migration-add-cpr_walk_fd.patch [RHEL-138494]
  - kvm-oslib-qemu_clear_cloexec.patch [RHEL-138494]
  - kvm-migration-cpr-exec-command-parameter.patch [RHEL-138494]
  - kvm-migration-cpr-exec-save-and-load.patch [RHEL-138494]
  - kvm-migration-cpr-exec-mode.patch [RHEL-138494]
  - kvm-migration-cpr-exec-docs.patch [RHEL-138494]
  - kvm-vfio-cpr-exec-mode.patch [RHEL-138494]
  - kvm-hw-vfio-listener-Include-missing-exec-target_page.h-.patch [RHEL-138494]
  - kvm-hw-Remove-unnecessary-system-ram_addr.h-header.patch [RHEL-138494]
  - kvm-vfio-container-Remap-only-populated-parts-in-a-secti.patch [RHEL-138494]
  - kvm-vfio-cpr-legacy-drop-an-erroneous-assert.patch [RHEL-138494]
  - kvm-vfio-iommufd-Set-cpr.ioas_id-on-source-side-for-CPR-.patch [RHEL-138494]
  - kvm-vfio-iommufd-Restore-vbasedev-s-reference-to-hwpt-af.patch [RHEL-138494]
  - kvm-vfio-container-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-iommufd-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-listener-Add-an-assertion-for-unmap_all.patch [RHEL-138494]
  - kvm-vfio-Clean-up-includes.patch [RHEL-138494]
  - kvm-migration-set-correct-list-pointer-when-removing-not.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_process.patch [RHEL-138494]
  - kvm-vfio-user-clarify-partial-message-handling.patch [RHEL-138494]
  - kvm-vfio-user-refactor-out-header-handling.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_recv_one.patch [RHEL-138494]
  - kvm-vfio-user-recycle-msg-on-failure.patch [RHEL-138494]
  - kvm-include-hw-hyperv-Remove-unused-struct-mshv_vp_regis.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.18-rc3.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.19-rc1.patch [RHEL-138494]
  - kvm-hw-vfio-Add-helper-to-retrieve-device-feature.patch [RHEL-138494]
  - kvm-hw-vfio-region-Create-dmabuf-for-PCI-BAR-per-region.patch [RHEL-138494]
  - Resolves: RHEL-174858
    ([rhel10] Backport qemu cross-kernel migration mitigation series)
  - Resolves: RHEL-138494
    (NVIDIA:Grace-Hopper:Backport vfio: Add DMABUF support for PCI BAR regions - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-20
changelog:
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-178767]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-178767]
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-155807]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-155807]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-155807]
  - kvm-hw-tpm-tpm_tis_sysbus-defer-resource-allocation-to-r.patch [RHEL-178846]
  - kvm-vfio-container-Restrict-dma_map_file-to-shared-RAM-o.patch [RHEL-180750]
  - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-153123]
  - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-153123]
  - Resolves: RHEL-178767
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)
  - Resolves: RHEL-155807
    (live migration failed the VM just register key only [rhel-10.3])
  - Resolves: RHEL-178846
    ([aarch64] qemu-kvm crashes on --device tpm-tis-device,?)
  - Resolves: RHEL-180750
    (Backport in QEMU : vfio/container: Restrict dma_map_file() to shared RAM or RAM devices)
  - Resolves: RHEL-153123
    (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-21
changelog:
  - kvm-hw-vfio-sort-and-validate-sparse-mmap-regions-by-off.patch [RHEL-150900]
  - kvm-vfio-Add-Error-parameter-to-vfio_region_setup.patch [RHEL-150900]
  - kvm-hw-vfio-align-mmap-to-power-of-2-of-region-size-for-.patch [RHEL-150900]
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184530]
  - Resolves: RHEL-150900
    (NVIDIA:Grace:Backport hw/vfio: Enable hugepfnmap for non-power-of-2 device memory regions - RHEL 10.3)
  - Resolves: RHEL-184530
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-22
changelog:
  - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-121686]
  - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-121686]
  - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-121686]
  - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-121686]
  - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-121686]
  - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-121686]
  - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-121686]
  - kvm-block-graph-lock-fix-missed-wakeup-in-bdrv_graph_co_.patch [RHEL-186384]
  - kvm-block-curl-fix-curl-internal-handles-handling.patch [RHEL-186384]
  - kvm-block-curl.c-Use-explicit-long-constants-in-curl_eas.patch [RHEL-186384]
  - kvm-block-curl.c-Fix-CURLOPT_VERBOSE-parameter-type.patch [RHEL-186384]
  - kvm-block-curl-fix-concurrent-completion-handling.patch [RHEL-186384]
  - kvm-block-curl-free-s-password-in-cleanup-paths.patch [RHEL-186384]
  - kvm-nvme-Kick-and-check-completions-in-BDS-context.patch [RHEL-186384]
  - kvm-nvme-Note-in-which-AioContext-some-functions-run.patch [RHEL-186384]
  - kvm-block-remove-detached-header-option-from-opts-after-.patch [RHEL-186384]
  - kvm-block-fix-luks-amend-when-run-in-coroutine.patch [RHEL-186384]
  - kvm-qed-Don-t-try-to-flush-during-incoming-migration.patch [RHEL-186384]
  - kvm-block-vmdk-fix-OOB-read-in-vmdk_read_extent.patch [RHEL-186384]
  - kvm-block-throttle-groups-fix-deadlock-with-iolimits-and.patch [RHEL-186384]
  - kvm-throttle-group-Fix-race-condition-in-throttle_group_.patch [RHEL-186384]
  - kvm-qemu-img-Fix-amend-option-parse-error-handling.patch [RHEL-186384]
  - kvm-qemu-img-rebase-don-t-exceed-IO_BUF_SIZE-in-one-oper.patch [RHEL-186384]
  - kvm-python-backport-drop-Python3.6-workarounds.patch [RHEL-186384]
  - kvm-python-backport-Remove-deprecated-get_event_loop-cal.patch [RHEL-186384]
  - kvm-python-backport-avoid-creating-additional-event-loop.patch [RHEL-186384]
  - kvm-iotests-147-ensure-temporary-sockets-are-closed-befo.patch [RHEL-186384]
  - kvm-iotests-151-ensure-subprocesses-are-cleaned-up.patch [RHEL-186384]
  - kvm-tests-qemu-iotest-fix-iotest-024-with-qed-images.patch [RHEL-186384]
  - kvm-tests-qemu-iotests-Fix-check-for-existing-file-in-_r.patch [RHEL-186384]
  - kvm-async-access-bottom-half-flags-with-qatomic_read.patch [RHEL-186384]
  - kvm-block-linux-aio-bound-ioq_submit-recursion-depth.patch [RHEL-186384]
  - kvm-block-io-fallback-to-bounce-buffer-if-BLKZEROOUT-is-.patch [RHEL-186384]
  - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-186384]
  - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-186384]
  - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-186384]
  - kvm-virtio-Fix-crash-when-sriov-pf-is-set-for-non-PCI-Ex.patch [RHEL-186384]
  - kvm-virtio-scsi-pass-the-same-cdb_size-to-virtio_scsi_po.patch [RHEL-186384]
  - kvm-hw-scsi-avoid-deadlock-upon-TMF-request-cancelling-w.patch [RHEL-186384]
  - kvm-virtio-blk-fix-zone-report-buffer-out-of-memory-CVE-.patch [RHEL-186384]
  - kvm-ide-Fix-potential-assertion-failure-on-VM-stop-for-P.patch [RHEL-186384]
  - kvm-block-Create-DEFAULT_BLOCK_CONF-macro.patch [RHEL-186384]
  - kvm-block-Add-more-defaults-to-DEFAULT_BLOCK_CONF.patch [RHEL-186384]
  - kvm-block-mirror-check-range-when-setting-zero-bitmap-fo.patch [RHEL-186384]
  - kvm-iotests-test-active-mirror-with-unaligned-small-writ.patch [RHEL-186384]
  - kvm-block-mirror-fix-assertion-failure-upon-duplicate-co.patch [RHEL-186384]
  - kvm-commit-Drain-nodes-across-all-of-bdrv_commit.patch [RHEL-186384]
  - kvm-qemu-io-Add-aio_discard-command.patch [RHEL-186384]
  - kvm-qcow2-Fix-corruption-on-discard-during-write-with-CO.patch [RHEL-186384]
  - kvm-iotests-046-Test-that-discard-write_zeroes-wait-for-.patch [RHEL-186384]
  - kvm-qcow2-Fix-data-loss-on-zero-write-with-detect-zeroes.patch [RHEL-186384]
  - kvm-block-Fix-crash-after-setting-latency-historygram-wi.patch [RHEL-186384]
  - Resolves: RHEL-121686
    (qemu-kvm hung during drain after double pause)
  - Resolves: RHEL-186384
    (virt-storage: Backport stable branch fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-23
changelog:
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vde.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Factor-out-common-helper-function.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-add-memory-regions-as-property-for-an-SM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Extract-common-definitions-to-smmuv3-c.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Make-iommu-ops-part-of-SMMUState.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-smmuv3-accel-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Initialize-shared-system-address.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Move-pci_init_bus_master-after-adding-dev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Export-pci_device_get_iommu_bus_devfn-and-ret.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Add-optional-supports_address_space-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-bridge-pci_expander_bridge-Move-TYPE_PXB_PCIE.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Restrict-accelerated-SMMUv3-to-v.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Implement-get_viommu_cap-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_viommu_flags.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_host_iommu_quirks.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Define-STE-CD-fields-via-regist.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-NSCFG-bit-definition-for-CD.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-STE-CD-set-helpers-for-repe.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-set-unset_iommu_device-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-propagate-smmuv3_cmdq_consume-errors-t.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-nested-vSTE-install-uninstal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Install-SMMUv3-GBPA-based-hwpt.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Introduce-a-callback-to-retrieve-the-MSI-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-get_msi_direct_gpa-cal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-msi-gpa-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-to-issue-invalidatio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Initialize-ID-registers-early-during-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Get-host-SMMUv3-hw-info-and-vali.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-host-gpex-Allow-to-generate-preserve-boot-con.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-PCI-preserve_config-for-accel-SMMUv3.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Prepare-for-IORT-reviso.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-build-Add-IORT-RMR-regions-to-handl.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Update-IORT-blobs-after.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Block-migration-when-accel-is-enabled.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-accel-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-a-property-to-specify-RIL-su.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-for-ATS.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-property-to-specify-OAS-bits.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Retrieve-PASID-width-from-iommufd_b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Add-get_pasid_info-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Add-helper-to-insert-PCIe-extended-capability.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Factor-out-common-PASID-capability-initializa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-pci-Synthesize-PASID-capability-for-vfio-pci.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Make-SubstreamID-support-configu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-memory-Factor-address_space_is_io-out.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-target-i386-arch_memory_mapping-Use-address_space_me.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-s390x-sclp-Use-address_space_memory_is_io-in-sclp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-physmem-Remove-cpu_physical_memory_is_io.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-viommu-free-helper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Allocate-vEVENTQ-for-accelerated.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Introduce-a-helper-function-for-event-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Read-and-propagate-host-vIOMMU-e.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Correct-SMMUEN-field-name-in-CR0.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Fix-CFGI_CD-handling-when-stage-1-is-u.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Check-ATS-compatibility-between-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ats-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ril-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-a-SsidSizeMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ssidsize-property-type-to.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-an-OasMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-oas-property-type-to-OasM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Document-arm-smmuv3-device-s-accel-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Have-smmuv3_accel_init-take-an-Error-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Update-ATC-invalidation-check.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Improve-accel-SMMUv3-usage-documentati.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-helper-for-resolving-auto-pa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ats.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ril.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ssidsiz.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-oas.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Set-default-ats-ril-ssidsize-oas-to-au.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Support-auto-for-accel-SMMUv3-proper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Enforce-pci_setup_iommu_per_bus-is-called.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-vfio-iommufd-Force-creating-nesting-parent-HWPT.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-iommufd-Control-dirty-tracking-for-nesting-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_get_device_i.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-iommufd-Rename-all-the-idev-and-idevc-variables-to-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_alloc_viommu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_hw_.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_viommu_mm.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-iommufd-Remove-unused-viommu-pointer-from-IOM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-CMDQV-ops-interface.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Avoid-including-CONFIG_DEVICES-in-hw-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Add-Tegra241-CMDQV-ops-backend.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Wire-CMDQV-ops-into-accel-lifecy.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Use-stored-SMMUv3-device-list-for-IORT-b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Probe-host-Tegra241-CMDQV-supp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-init.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Link-SMMUv3-CMDQV-resources-to-platform-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-vIOMMU-alloc-f.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-mmap-host-VINTF-Page0-for-CMDQ.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-CMDQ-V-Config-region.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-reads.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-writes.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Allocate-HW-VCMDQs-once-config.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Route-allocated-VCMDQ-Page0-ac.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-memory-Allow-RAM-device-regions-to-skip-IOMMU-mappin.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Use-mmap-d-host-VINTF-page0-fo.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-common-helper-for-veve.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Read-and-propagate-Tegra241-CM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Initialize-register-state-on-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Limit-queue-size-based-on-back.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-per-device-identifier-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-helper-to-query-CMDQV-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-Advertise-Tegra241-CMDQV-nodes-in-D.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Enforce-viommu-association-when-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Document-the-CMDQV-design-and-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-cmdqv-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-rh-aarch64-rh-devices.mak-Add-CONFIG_TEGRA241_CMDQV.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - Resolves: RHEL-142465
    ([RHEL-10.1][ARM]: Two smmuv3 devices can be attached to the same bus)
  - Resolves: RHEL-160190
    (NVIDIA:Backport hw/arm/smmuv3-accel: Support AUTO properties - RHEL 10.3)
  - Resolves: RHEL-163596
    (NVIDIA:Backport hw/arm/smmuv3-accel: Resolve AUTO properties - RHEL 10.3)
  - Resolves: RHEL-73794
    (NVIDIA:Grace-Hopper:Backport HW accelerated nesting support for arm SMMUv3 - RHEL 10.1)
  - Resolves: RHEL-73796
    (NVIDIA:Grace-Hopper:Backport vEVENTQ support for smmuv3 - RHEL 10.1)
  - Resolves: RHEL-73798
    (NVIDIA:Grace-Hopper:Backport CMDQV support - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-24
changelog:
  - kvm-net-tap-linux.c-avoid-abort-when-setting-invalid-fd.patch [RHEL-113894]
  - kvm-crypto-only-verify-CA-certs-in-chain-of-trust.patch [RHEL-111934]
  - kvm-crypto-remove-extraneous-pointer-usage-in-gnutls-cer.patch [RHEL-111934]
  - kvm-crypto-fix-error-reporting-in-cert-chain-checks.patch [RHEL-111934]
  - kvm-crypto-allow-client-server-cert-chains.patch [RHEL-111934]
  - kvm-crypto-stop-requiring-key-encipherment-usage-in-x509.patch [RHEL-111934]
  - kvm-crypto-switch-to-newer-gnutls-API-for-distinguished-.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-parameter-checking-CA-certs.patch [RHEL-111934]
  - kvm-crypto-add-missing-free-of-certs-array.patch [RHEL-111934]
  - kvm-crypto-replace-stat-with-access-for-credential-check.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-access-checks-before-loading.patch [RHEL-111934]
  - kvm-crypto-move-check-for-TLS-creds-dir-property.patch [RHEL-111934]
  - kvm-crypto-use-g_autofree-when-loading-x509-credentials.patch [RHEL-111934]
  - kvm-crypto-remove-needless-indirection-via-parent_obj-fi.patch [RHEL-111934]
  - kvm-crypto-move-release-of-DH-parameters-into-TLS-creds-.patch [RHEL-111934]
  - kvm-crypto-shorten-the-endpoint-server-check-in-TLS-cred.patch [RHEL-111934]
  - kvm-crypto-remove-duplication-loading-x509-CA-cert.patch [RHEL-111934]
  - kvm-crypto-reduce-duplication-in-handling-TLS-priority-s.patch [RHEL-111934]
  - kvm-crypto-introduce-method-for-reloading-TLS-creds.patch [RHEL-111934]
  - kvm-crypto-introduce-a-wrapper-around-gnutls-credentials.patch [RHEL-111934]
  - kvm-crypto-fix-lifecycle-handling-of-gnutls-credentials-.patch [RHEL-111934]
  - kvm-crypto-make-TLS-credentials-structs-private.patch [RHEL-111934]
  - kvm-crypto-deprecate-use-of-external-dh-params.pem-file.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-CA-certs-twice.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-identity-certs-twice.patch [RHEL-111934]
  - kvm-crypto-expand-logic-to-cope-with-multiple-certificat.patch [RHEL-111934]
  - kvm-crypto-support-upto-5-parallel-certificate-identitie.patch [RHEL-111934]
  - kvm-docs-creation-of-x509-certs-compliant-with-post-quan.patch [RHEL-111934]
  - kvm-iommufd-Introduce-handler-for-device-ATS-support.patch [RHEL-184675]
  - kvm-vfio-pci-Add-ats-property.patch [RHEL-184675]
  - Resolves: RHEL-113894
    ([RHEL.10.2][virual network] Hit qemu coredump when removed an interface that the guest is using from the host)
  - Resolves: RHEL-111934
    (QEMU support for loading multiple sets of x509 certs for PQC hybrid mode)
  - Resolves: RHEL-184675
    (NVIDIA:Backport vfio/pci: add vfio-pci ATS control property - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-25
changelog:
  - kvm-hw-core-platform-bus-guard-platform_bus_get_mmio_add.patch [RHEL-180837]
  - kvm-hw-tpm-gate-PPI-support-on-tpm-tis-device-behind-a-d.patch [RHEL-180837]
  - kvm-hw-tpm-default-tpm-tis-device-PPI-to-disabled.patch [RHEL-180837]
  - kvm-s390x-css-limit-number-of-CHPIDs-in-description.patch [RHEL-192791]
  - kvm-s390x-ioinst-Require-strict-length-and-format-for-SE.patch [RHEL-192791]
  - kvm-s390x-pci-Shrink-RPCIT-ranges-to-registered-window.patch [RHEL-192791]
  - kvm-s390x-pci-Tighten-region-detection-for-BAR-read-writ.patch [RHEL-192791]
  - kvm-s390x-sclp-reject-invalid-write-event-data-headers.patch [RHEL-192791]
  - kvm-s390x-kvm-clamp-stsi-3.2.2-size.patch [RHEL-192791]
  - kvm-s390x-sclp-prevent-re-reading-the-sclp-header.patch [RHEL-192791]
  - kvm-s390x-sclpcpi-check-event-length-field-before-readin.patch [RHEL-192791]
  - kvm-s390x-css-firm-up-handling-of-chained-TIC-CCWs.patch [RHEL-192791]
  - Resolves: RHEL-180837
    ([aarch64] Live migration of TPM-equipped guests fails: Unknown ramblock "tpm-ppi" (qemu-kvm-10.1.0-19.el10 → older builds))
  - Resolves: RHEL-192791
    (RHEL10.0 - qemu s390x: interface harding fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-26
changelog:
  - kvm-vfio-region-Clarify-dma-buf-failure-messages.patch [RHEL-224652]
  - Resolves: RHEL-224652
    (Backport  vfio/region: Clarify dma-buf failure messages )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-27
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-151317]
  - Resolves: RHEL-151317
    (RHEL10 - KVM full Boot order support -- Guest is crashing for the invalid boot device(<boot order='1'/> -- add-on qcow2 file))


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-28
changelog:
  - kvm-system-memory-Use-memmove-for-directly-accessible-re.patch [RHEL-246035]
  - kvm-system-memory-Use-qemu_ram_move-for-directly-accessi.patch [RHEL-246035]
  - kvm-system-memory-Make-ram-device-region-directly-access.patch [RHEL-246035]
  - Resolves: RHEL-246035
    ([RHEL10.3] Exhausted DMA bounce buffer on building cuda-samples in VM)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Milan Crha <mcrha@redhat.com> - 0.9.1-12
changelog:
  - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
    Resolves: RHEL-213751


author: mjcr99 <macano@redhat.com> - 1:0.3.9-1
changelog:
  - Update rhc to 0.3.9
  - Resolves: RHEL-174319
  - Resolves: RHEL-174314
  - Resolves: RHEL-153860
  - Resolves: RHEL-138740


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-24
changelog:
  - Add support for %autosetup -C (RHEL-141269)
  - Add support for database parking (RHEL-126405)
  - Make syslog plugin actually useful and also required (RHEL-155272)
  - Require rpm-plugin-audit instead of just recommending (RHEL-139071)
  - Fix buffer overruns with long language strings (RHEL-169755)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-2
changelog:
  - Rebase to 8.2604.0
    Resolves: RHEL-140910
  - Drop ossl-free-cert.patch (upstream)
  - Drop gtls-unused-certificates.patch (upstream)
  - Add SAN:IP validation support
    Resolves: RHEL-150376
  - Add TlsRevocationCheck support
    Resolves: RHEL-151324
  - Fix omelasticsearch IPv6 handling
    Resolves: RHEL-164768
  - Fix imfile not releasing deleted file FDs in inotify mode
    Resolves: RHEL-149118


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-3
changelog:
  - Backport omelasticsearch PQC TLS parameters (tls.tlsversion, tls.ciphersuites,
  <<<<<<< HEAD
    tls.keyexchangegroups)
  =======
    tls.keyexchangegroups) and apply them during startup version detection
  >>>>>>> dad7741 (omelasticsearch: apply TLS options during startup detection)
    Resolves: RHEL-193505


author: Attila Lakatos <alakatos@redhat.com> - 8.2604.0-4
changelog:
  - Backport: warn when imjournal fails to retrieve MESSAGE field from journal entry
    Resolves: RHEL-193508


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171246


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
changelog:
  - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
    Resolves: RHEL-181681
  - Fix information disclosure via MITM attack bypassing TLS in net-imap.
    (CVE-2026-42246)
    Resolves: RHEL-181769
  - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
    Resolves: RHEL-181799


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
changelog:
  - Upgrade to Ruby 4.0.3.
    Resolves: RHEL-170933
  - Fix ERB: Arbitrary code execution via deserialization bypass
   (CVE-2026-41316)
    Resolves: RHEL-170911
  - Fix JSON: Denial of Service or Information Disclosure via format string injection
   (CVE-2026-33210)
   Resolves: RHEL-169964


author: Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-35
changelog:
  - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
    Includes core fix plus additional performance optimizations 
    Resolves: RHEL-181680
  - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
    Resolves: RHEL-181753
  - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
    Resolves: RHEL-181785


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Dan Horák <dhorak@redhat.com> - 2:2.41.0-1
changelog:
  - rebased to 2.41.0 (RHEL-136097)
  - hsci: Automatically set appropriate MTU for HSCI (RHEL-153550)
  - Resolves: RHEL-136097 RHEL-153550


author: Dan Horák <dhorak@redhat.com> - 2:2.42.1-1
changelog:
  - rebased to 2.42.1 (RHEL-174898)
  - hyptop: Backward compatibility options causes other issues (RHEL-166157)
  - zipl/boot: Fix stage3 secure boot trailer placement (RHEL-170707)
  - SEL-EBC: instrumentation of an SEL initramfs to support early boot customization (RHEL-136433)
  - SEL-EBC: tool to build basic SEL-qcow2 image supporting early boot customization (RHEL-136435)
  - KVM: Enhance pvimg info command to display additional SE image information (RHEL-73136)
  - Resolves: RHEL-174898 RHEL-166157 RHEL-170707 RHEL-136433 RHEL-136435 RHEL-73136


author: Dan Horák <dhorak@redhat.com> - 2:2.44.0-1
changelog:
  - rebased to 2.44.0 (RHEL-174898)
  - KVM: Quantum Safe SE Header and tooling support (RHEL-149687)
  - Introduce NVMe SMART data monitoring to the zpcimon service (RHEL-191175)
  - zkey key support for dm-integrity with HMAC (RHEL-23872)
  - fix zipl support for mixed type mdadm RAID1 devices (RHEL-180629)
  - Resolves: RHEL-174898 RHEL-149687 RHEL-191175 RHEL-23872 RHEL-180629


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.36-1
changelog:
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code
  - browser: Always show "Report Bug" button


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-1
changelog:
  - Migrate from libxml2 to xml.etree.ElementTree
  - Handle ImportError when setroubleshoot.browser is not available
  - Add support for multiple commands in fix_cmd (RHEL-155209)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.37-2
changelog:
  - Update GPL2 license texts to the latest version
  - Limit RPC request size in RequestReceiver to prevent memory exhaustion (RHEL-214326)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.22.2-2
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.22.2
  - re-add test file installation to fix tier0 tests
  - Resolves: RHEL-153734


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-2
changelog:
  - use %configure RPM macro instead of bare ./configure to inject
    RPM hardening flags (stack protector, FORTIFY_SOURCE)
  - use %make_build and %make_install RPM macros
  - Resolves: RHEL-152227


author: Jindrich Novy <jnovy@redhat.com> - 1.3.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.4
  - Resolves: RHEL-212009


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Martin Osvald <mosvald@redhat.com> - 1.7.4.4-9
changelog:
  - Add openssl-groups option for post-quantum key exchange
  - Add test for openssl-groups option
    Resolves: RHEL-129232


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-12
changelog:
  - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap
    Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted
    ICP traffic (CVE-2026-32748)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-15
changelog:
  - Resolves: RHEL-168094 - Squid crashes with assertion failure during shutdown
    when cache_dir is enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-8.p2
changelog:
  - Resolves: RHEL-95850 - A sudo'd command when invoked from ksh through a
    pipe mangles output, leaves tty insane


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-5
changelog:
  - Add extra SELinux policies.
    https://github.com/stefanberger/swtpm/issues/970
    Resolves: RHEL-70835
    Resolves: RHEL-73809


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-22
changelog:
  - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
  - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
  - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
  - hwdb: update rules (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - Add Razer Cobra mouse to hwdb (RHEL-72702)
  - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
  - hwdb: sort SDR devices by vendor name (RHEL-72702)
  - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
  - hwdb: run "update-hwdb" (RHEL-72702)
  - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
  - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
  - hwdb: add Airspy devices (RHEL-72702)
  - hwdb: add more devices (RHEL-72702)
  - hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
  - hwdb: add missing Ettus Research B200 rule (RHEL-72702)
  - hwdb: add LimeSDR XTRX devices (RHEL-72702)
  - hwdb: add HydraSDR RFOne (RHEL-72702)
  - hwdb: add SDRplay devices (RHEL-72702)
  - hwdb: update (RHEL-72702)
  - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
  - Add Nulea M501 trackball to hwdb (RHEL-72702)
  - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
  - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
  - remove bonus line (RHEL-72702)
  - hwdb: drop trailing whitespace (RHEL-72702)
  - remove Nulea M501 usb entry from hwdb (RHEL-72702)
  - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702)
  - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702)
  - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702)
  - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702)
  - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702)
  - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702)
  - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702)
  - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702)
  - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702)
  - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702)
  - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: update autosuspend rules (RHEL-72702)
  - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702)
  - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702)
  - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702)
  - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702)
  - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702)
  - Update hwdb (RHEL-72702)
  - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702)
  - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702)
  - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702)
  - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702)
  - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702)
  - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702)
  - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702)
  - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702)
  - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702)
  - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702)
  - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702)
  - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702)
  - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard   device as set 1 (appears as raw set 2) or as set 2 (appears as   translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for   posterity. (RHEL-72702)
  - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702)
  - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702)
  - hwdb: keyboard: uppercase apple id (RHEL-72702)
  - integritysetup: Add support for hmac-sha512 (RHEL-27852)
  - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852)
  - core: increment start limit counter only when we can start the unit (RHEL-115032)
  - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032)
  - test: extend start limit interval (RHEL-115032)
  - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029)
  - man: fix typo (RHEL-143029)
  - test: fix test with -Dnetworkd=false (RHEL-143029)
  - ci: run apt-get update before running mkosi (RHEL-115001)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-23
changelog:
  - test-journal-dump: dump the headers of journal files (RHEL-106795)
  - journal: store counts, not byte sizes, in table size constants (RHEL-106795)
  - journal: treble field hash table size (RHEL-106795)
  - nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
  - user-classification: add new "foreign" UID range (RHEL-143036)
  - userdb: synthesize stub user records for the foreign UID (RHEL-143036)
  - dissect: add new --shift command (RHEL-143036)
  - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
  - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
  - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
  - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
  - sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
  - user-record: add helper for dispatching a disposition mask (RHEL-143036)
  - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036)
  - user-record: add some helpers for working with UserDBMatch (RHEL-143036)
  - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
  - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
  - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
  - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
  - update TODO (RHEL-143036)
  - JSON User/Group records: Add properties for UUIDs (RHEL-143036)
  - userdb: add support for printing the UUID from user and group records (RHEL-143036)
  - userdb: add support for looking up users or groups by uuid. (RHEL-143036)
  - userdbctl: add --uuid filtering option (RHEL-143036)
  - userdbctl: add missing --uuid= to --help text (RHEL-143036)
  - userdb: fix typo (RHEL-143036)
  - man/userdbctl: fixup version info (RHEL-143036)
  - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
  - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
  - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
  - logind: support deserializing session leader through pidfdid (RHEL-53112)
  - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
  - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
  - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219)
  - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-24
changelog:
  - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155454)
  - ci: add bpftool workaround to codeql job too (RHEL-155454)
  - ci: fix workaround about bpftool for codeql (RHEL-155454)
  - ci: add bpftool workaround to coverity too (RHEL-155454)
  - Revert "man: mention RHEL documentation in systemctl's man page" (RHEL-155805)
  - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155396)
  - cgroup: port some code over to path_startswith_full() (RHEL-155396)
  - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155396)
  - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155396)
  - core/cgroup: avoid one unnecessary strjoina() (RHEL-155396)
  - core: validate input cgroup path more prudently (RHEL-155396)
  - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-158303)
  - nspawn: normalize pivot_root paths (RHEL-158303)
  - udev: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-158354)
  - udev: ensure tag parsing stays within bounds (RHEL-158354)
  - udev: fix review mixup (RHEL-158354)
  - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-158354)
  - udev-builtin-net-id: print cescaped bad attributes (RHEL-158354)
  - core: only activate transaction that contain useful jobs (RHEL-143728)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-168098)
  - string-util: introduce strprepend() helper (RHEL-143028)
  - missing: add quotactl_fd() wrapper (RHEL-143028)
  - homed: always use quotactl_fd() if its available (RHEL-143028)
  - pid1: add GracefulOptions= setting to .mount units (RHEL-143028)
  - pid1: enable usrquota support on /dev/shm (RHEL-143028)
  - units: enable usrquota support on /tmp/ (RHEL-143028)
  - nspawn: enable usrquota support on /tmp/ and /dev/shm/ (RHEL-143028)
  - nspawn: downgrade log message about usrquota to debug (RHEL-143028)
  - mount-setup: drop outdated comment (RHEL-143028)
  - mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too (RHEL-143028)
  - devnum-util: add macros to safely convert dev_t to pointers and back (RHEL-143028)
  - user-record: add fields for setting limits on /tmp/ and /dev/shm/ (RHEL-143028)
  - user-runtime-dir: some smaller modernizations/refactorings (RHEL-143028)
  - user-runtime-dir: enforce /tmp/ and /dev/shm/ quota (RHEL-143028)
  - homectl: add support for configuring tmpfs limits (RHEL-143028)
  - test: add test case for tmpfs quota logic + PAMName= ask-password logic (RHEL-143028)
  - update TODO (RHEL-143028)
  - core/dbus-service: fix alignment (RHEL-143028)
  - core/mount: filter out "fail" option as well (RHEL-143028)
  - core/mount: check parameters_fragment first in mount_enter_(re)mounting() (RHEL-143028)
  - core/mount: report accurate can_start and can_reload (RHEL-143028)
  - core/mount: trivial coding style cleanups (RHEL-143028)
  - core/dbus-mount: add missing ReloadResult and CleanResult properties (RHEL-143028)
  - bus-unit-util: add missing assertions (RHEL-143028)
  - core/mount: rework GracefulOptions= to be just x-systemd.graceful-option= (RHEL-143028)
  - mountpoint-util: assume fsopen() works in mount_option_supported() (RHEL-143028)
  - core/mount: log only once about fs not supporting new mount API (RHEL-143028)
  - user-runtime-dir: correct quota size calculation (RHEL-143028)
  - test-display-quota: add a little helper binary to show quota on tmpfs (RHEL-143028)
  - TEST-46-HOMED: check for support on /dev/shm and /tmp separately (RHEL-143028)
  - TEST-46-HOMED: conditionally skip usrquota tests (RHEL-143028)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-25
changelog:
  - core: cleanup unit's dropin directories from global cache (RHEL-171097)
  - libsystemd: drop "const" decorators on public inline functions (RHEL-155454)
  - sd-id128: Drop _sd_const_ from sd_id128_in_setv() (RHEL-155454)
  - test: wrap mount/umount when running with sanitizers (RHEL-155454)
  - test: wrap even more binaries when running with sanitizers (RHEL-155454)
  - test: temporarily ignore sanitizer warning about blocked ptrace() (RHEL-155454)
  - test: slightly reduce the performance/memory overhead for wrapped binaries (RHEL-155454)
  - fstab-generator: support swap on network block devices (RHEL-128058)
  - man: add tags for the next few versions (RHEL-128058)
  - test: drop some extraneous whitespaces (RHEL-155021)
  - shared: fix segfault when processing matchHostname field (RHEL-155021)
  - shared: don't exclude valid min/max values for cgroup weight fields (RHEL-155021)
  - shared: don't leak memory from array fields (RHEL-155021)
  - man: fix short option for userdbctl's --from-file= (RHEL-155021)
  - fuzz: add a fuzzer for user records (RHEL-155021)
  - user-record: extract user_record_image_is_blockdev() common helper (RHEL-155021)
  - udev/net_id: introduce naming scheme for RHEL-9.9 (RHEL-72814)
  - udev/net_id: introduce naming scheme for RHEL-10.3 (RHEL-72814)
  - Tag accel devices for uaccess-render (RHEL-153030)
  - udev: tag kfd devices for xaccess-render (#40888) (RHEL-153030)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-28
changelog:
  - man: reword the description of "secure pager" handling (RHEL-102939)
  - pager: also check for $SUDO_UID (RHEL-102939)
  - Revert "mount-setup: tune down log level if usrquota is not supported, apply usrquota when smack is in use too" (RHEL-143028)
  - Revert "nspawn: enable usrquota support on /tmp/ and /dev/shm/" (RHEL-143028)
  - Revert "units: enable usrquota support on /tmp/" (RHEL-143028)
  - Revert "pid1: enable usrquota support on /dev/shm" (RHEL-143028)
  - Revert "udev-builtin-net-id: print cescaped bad attributes" (RHEL-180922)
  - homectl: apply all --member-of= groups from a comma-separated list (RHEL-180924)
  - udevadm: gracefully handle when a maked file is specified to udevadm verify/cat (RHEL-180917)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-29
changelog:
  - udev: drop redundant checks (RHEL-180923)
  - TEST-71-HOSTNAME: specify job mode for the stop job (#38413) (RHEL-180923)
  - test: wait for coredump to appear before parsing (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: make coredumps stored in archived journal file (RHEL-155454)
  - TEST-87-AUX-UTILS-VM: rotate journal at one more place (RHEL-155454)
  - udev-rules: add missing device name prefix in log message (RHEL-180929)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-32
changelog:
  - resolved: replace assert() with error return in DNSSEC verify functions (RHEL-158349)
  - pid1: normalize oom error handling a bit (RHEL-169656)
  - sd-path: don't chop off trailing slash in sd_path apis, when user provided them (RHEL-169656)
  - systemd-path: order all listed paths by their ID alphabetically (RHEL-169656)
  - systemd-path: guarantee that tool exit status is zero on success (RHEL-169656)
  - systemd-path: add the usual ANSI sequences to --help text (RHEL-169656)
  - sd-path: expose credential store in sd-path (RHEL-169656)
  - execute: introduce a user-scoped credstore (RHEL-169656)
  - pid1: add support for decrypting per-user credentials (RHEL-169656)
  - test: add integration test that makes sure unpriv creds work correctly (RHEL-169656)
  - man: document the new per-use credstore paths (RHEL-169656)
  - update TODO (RHEL-169656)
  - cryptenroll/repart/creds: no longer default to binding against literal PCR 7 (RHEL-115813)
  - cryptenroll,repart: print a log message if no access restrictions are applied to TPM-based encryption (RHEL-115813)
  - repart: correct argument comment (RHEL-115813)
  - repart: use iovec structure for --key-file (RHEL-115813)
  - repart: make --tpm2-pcrs also configurable in repart.d/* (RHEL-115813)
  - repart: make --key-file also configurable in repart.d/* (RHEL-115813)
  - man/repart: fix typo (RHEL-115813)
  - man: systemd-measure. Remove 'tpm2-pcrs=' from cryptenroll command (#39590) (RHEL-115813)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-33
changelog:
  - hwdb,rules: add 82-net-auto-link-local.{hwdb,rules} to build (RHEL-72703)
  - Expand hwdb entries for additional hardware wallets (RHEL-72703)
  - hwdb: keyboard: hp omnibook ultra flip (RHEL-72703)
  - quirks: keyboard: d330 keyboard rework (RHEL-72703)
  - hwdb: sensor: correct D330 respecting panel mount (RHEL-72703)
  - hwdb: sensor: recover Duet 3 10IGL5 normal and LTE (RHEL-72703)
  - hwdb: sensor: remove Asus T101HA and T101HAF (RHEL-72703)
  - hwdb: quote invalid patterns in error messages (RHEL-72703)
  - Add sensor entry for Toshiba Encore WT10A-108 (RHEL-72703)
  - quirks: sensor: squash toshiba tablets (RHEL-72703)
  - Revert "hwdb: fix arrow keys on HP Elite Dragonfly G3" (RHEL-72703)
  - hwdb: don't error on empty hwdb file (RHEL-72703)
  - udev: rules: guess devices if internal or external (RHEL-72703)
  - udev: rules: integration add spi bus for input dev (RHEL-72703)
  - udev: rules: integration fix (RHEL-72703)
  - hwdb: update (RHEL-72703)
  - hwdb: update autosuspend rules (RHEL-72703)
  - hwdb: sensor: say that model sort is groupped (RHEL-72703)
  - hwdb: sensor: acer refactor and rework (RHEL-72703)
  - hwdb: sensor: aquarius rework (RHEL-72703)
  - hwdb: sensor: archos in-line commenting (RHEL-72703)
  - hwdb: sensor: asus refactor and rework (RHEL-72703)
  - hwdb: sensor: axxo fix previous search and replace (RHEL-72703)
  - hwdb: sensor: ayaneo refactor and rework (RHEL-72703)
  - hwdv: sensor: bmax add fixme notes (RHEL-72703)
  - hwdb: sensor: bush minor changes (RHEL-72703)
  - hwdb: sensor: chuwi refactor (RHEL-72703)
  - hwdb: sensor: connect fix (RHEL-72703)
  - hwdb: sensor: csl fix (RHEL-72703)
  - hwdb: sensor: cyberbook add comment (RHEL-72703)
  - hwdb: sensor: cytrix fix (RHEL-72703)
  - hwdb: sensor: cube refactor (RHEL-72703)
  - hwdb: sensor: dell rework (RHEL-72703)
  - hwdb: sensor: dere add comments (RHEL-72703)
  - hwdb: sensor: dexp rework (RHEL-72703)
  - hwdb: sensor: digibras in-line comment (RHEL-72703)
  - hwdb: sensor: digma in-line comment (RHEL-72703)
  - hwdb: sensor: endless add comment (RHEL-72703)
  - hwdb: sensor: estar add comment (RHEL-72703)
  - hwdb: sensor: eve in-line comment (RHEL-72703)
  - hwdb: sensor: exo add in-line comment (RHEL-72703)
  - hwdb: sensor: geo add in-line comment (RHEL-72703)
  - hwdb: sensor: glavey add colon to sensor dmi (RHEL-72703)
  - hwdb: sensor: gp add colon to sensor dmi (RHEL-72703)
  - hwdb: sensor: gpd refactor (RHEL-72703)
  - hwdb: sensor: hometech fix formatting (RHEL-72703)
  - hwdb: sensor: hp refactor (RHEL-72703)
  - hwdb: sensor: huawei add in-line comment (RHEL-72703)
  - hwdb: sensor: iota 360 is the model (RHEL-72703)
  - hwdb: sensor: it-works refactor (RHEL-72703)
  - hwdb: sensor: irbis in-line comentting (RHEL-72703)
  - hwdb: sensor: jumper prefer bios version over ct (RHEL-72703)
  - hwdb: sensor: kazam add in-line comment (RHEL-72703)
  - hwdb: sensor: kd kurio add in-line comment (RHEL-72703)
  - hwdb: sensor: lamina add comments (RHEL-72703)
  - hwdb: sensor: lenovo refactor (RHEL-72703)
  - hwdb: sensor: linx in-line comment (RHEL-72703)
  - hwdb: sensor: mediacom in-line comment (RHEL-72703)
  - hwdb: sensor: medion add fixme notes (RHEL-72703)
  - hwdb: sensor: metaphyuni in-line comment (RHEL-72703)
  - hwdb: sensor: microtech in-line comment (RHEL-72703)
  - hwdb: sensor: mpman in-line comment (RHEL-72703)
  - hwdb: sensor: msi add comment (RHEL-72703)
  - hwdb: sensor: myria in-line comment (RHEL-72703)
  - hwdb: sensor: nuvision refactor (RHEL-72703)
  - hwdb: sensor: odys add comment (RHEL-72703)
  - hwdb: sensor: onda refactor (RHEL-72703)
  - hwdb: sensor: one-netbook refactor (RHEL-72703)
  - hwdb: sensor: orangepi in-line comment (RHEL-72703)
  - hwdb: sensor: passion in-line comment (RHEL-72703)
  - hwdb: sensor: peaq add comment (RHEL-72703)
  - hwdb: sensor: pine64 in-line comment (RHEL-72703)
  - hwdb: sensor: pipo refactor (RHEL-72703)
  - hwdb: sensor: ployer in-line comment (RHEL-72703)
  - hwdb: sensor: point-of-view refactor (RHEL-72703)
  - hwdb: sensor: positivo simplify dmi matches (RHEL-72703)
  - hwdb: sensor: predia reformat dmi match (RHEL-72703)
  - hwdb: sensor: prowise add comment (RHEL-72703)
  - hwdb: sensor: purism in-line comment (RHEL-72703)
  - hwdb: sensor: reeder in-line comment (RHEL-72703)
  - hwdb: sensor: rca in-line comment (RHEL-72703)
  - hwdb: sensor: schneider remove number part match (RHEL-72703)
  - hwdb: sensor: teclast refactor (RHEL-72703)
  - hwdb: sensor: thundersoft reformat dmi match (RHEL-72703)
  - hwdb: sensor: toshiba refactor (RHEL-72703)
  - hwdb: sensor: trekstor in-line comment (RHEL-72703)
  - hwdb: sensor: voyo fix dmi match format (RHEL-72703)
  - hwdb: sensor: wortmann in-line comment (RHEL-72703)
  - hwdb: sensor: yours add comment (RHEL-72703)
  - hwdb: sensor: unknown add colon to sensor match (RHEL-72703)
  - hwdb: add Vernier Go Direct sensors (RHEL-72703)
  - hwdb: sensor: hp use board product name as hp-wmi (RHEL-72703)
  - hwdb: fix typos (RHEL-72703)
  - Add BNCF NewBook 11 ACCEL_MOUNT_MATRIX  to 60-sensor.hwdb (RHEL-72703)
  - udev: hwdb: replace ID_INPUT_JOYSTICK_INTEGRATION (RHEL-72703)
  - udev: rules: improve usb integration detection (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - hwdb: drop trailing whitespace (RHEL-72703)
  - hwdb: fix typos reported by Copilot, reword comment (RHEL-72703)
  - hwdb: use more modern python syntax in one more place (RHEL-72703)
  - hwdb: add one more USB ID for 3D Connexion SpaceMouse Wireless BT (#40890) (RHEL-72703)
  - hwdb/keyboard: Map FN key on Positron Proxima 15 (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: map Xiaomi Mi Notebook Pro star key to KEY_MACRO (RHEL-72703)
  - Fix media keys for Lenovo ThinkBook 14 2-in-1 G5 IAU (RHEL-72703)
  - hwdb: sensor: bncf reformat match (RHEL-72703)
  - hwdb: update HP Envy x360 patterns to cover newer 14-fc0xxx models (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb/keyboard: fix Positron vendor location (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: fix ABS_PRESSURE axis range for Goodix GXTP5100 touchpad (RHEL-72703)
  - hwdb/keyboard: Map FN key on Wareus B15 (RHEL-72703)
  - sensor: gpd fix matches (RHEL-72703)
  - hwdb: sensor: fix bncf newbook 11 (RHEL-72703)
  - hwdb: keyboard: erase entry that will never match (RHEL-72703)
  - hwdb: Add PXN HB S handbrake (RHEL-72703)
  - hwdb: Add keymaps for Acer Nitro 5 AN517-54 (RHEL-72703)
  - hwdb: Silence spurrious F23 key-press from Fn key on Thinkpad T14s (RHEL-72703)
  - hwdb/keyboard: fix enter key for X+ piccolo (RHEL-72703)
  - hwdb: sensor: aquarius improve comments (RHEL-72703)
  - hwdb: cooler master rgb controller is not a mouse (RHEL-72703)
  - hwdb: Add extended SteelSeries Arctis headset device support (#41628) (RHEL-72703)
  - sensor: gpd remove pocket 3 and 4 (RHEL-72703)
  - hwdb: sensor: add accel mount matrix for GPD WIN 5 (RHEL-72703)
  - hwdb: Add missing Steelseries Arctis Pro Wireless (RHEL-72703)
  - hwdb: add correct keyboard mapping for touchpad_toggle event on msi gs66 stealth laptop (RHEL-72703)
  - hwdb: add SOUND_FORM_FACTOR for Edifier M60 and Fractal Scape Dongle (RHEL-72703)
  - hwdb: add Fn-key mappings for MSI GE76 Raider 10UG (RHEL-72703)
  - hwdb: add force-release to Nitro AN515-58 backlight keys (RHEL-72703)
  - hwdb/keyboard: fix KP_Enter on Clevo PA70ES (RHEL-72703)
  - hwdb/keyboard: use vendor/product specific match for X+ Piccolo (RHEL-72703)
  - Revert "hwdb/keyboard: fix KP_Enter on Clevo PA70ES" (RHEL-72703)
  - hwdb/keyboard: Map f21 key on Wareus B15 (RHEL-72703)
  - 60-sensor.hwdb iio/accel fix for Advan Evo-X 13 (#42037) (RHEL-72703)
  - hwdb: Add keymap for Lenovo 15IRX9 (#42141) (RHEL-72703)
  - parse_hwdb: introduce local variable for boolean syntax (RHEL-72703)
  - hwdb/acpi-update: apply "ruff format" (RHEL-72703)
  - hwdb/ids_parser: apply "ruff format" and "ruff check --fix" (RHEL-72703)
  - hwdb/parse_hwdb: apply "ruff format" and "ruff check --fix" (RHEL-72703)
  - hwdb/ids_parser: make text_eol a proper function (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend rules (RHEL-72703)
  - hwdb/keyboard: fix match for for X+ Piccolo, again (RHEL-72703)
  - hwdb: add Infinix Y3 Max YL-613 touchpad properties (RHEL-72703)
  - hwdb: add Infinix Y3 Max YL-613 keys (RHEL-72703)
  - hwdb: Add Native Instruments Traktor MX2 (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - hwdb: add Griffin PowerMate (RHEL-72703)
  - (hwdb) Update MSI Claw Entries - Add support for MSI Claw A8 BZ2EM. - Switch to using rn vice pn as MSI uses a unique pn for variants of the   same model. This prevents needing to update this file when a low volume   variant is released (I.E. Polar White AI 8+). (RHEL-72703)
  - Update 60-sensor.hwdb (RHEL-72703)
  - hwdb: fix match for MSI Claw entries (RHEL-72703)
  - Update 60-sensor.hwdb - Add support for Juno Tab 4 (Wifi) (RHEL-72703)
  - hwdb: Make Samsung download mode work out-of-the-box (RHEL-72703)
  - Add Elecom Huge Plus information for wired usb, wireless usb, and bluetooth (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - Steam deck lcd screen is a tablet LCD rotated in the kernel into portrait mode. (RHEL-72703)
  - Update hwdb (RHEL-72703)
  - Update hwdb autosuspend (RHEL-72703)
  - hwdb: Map Acer Nitro AN515-58 NitroSense button to prog1 (RHEL-72703)
  - hwdb: map Brazilian ThinkPad T14 Gen 1 slash key to KEY_RO (RHEL-72703)
  - hwbd: correctly map Bluetooth Key on MSI Modern 15 H AI C1MG laptop (RHEL-72703)
  - hwdb: add touchpad toggle mapping for MSI Katana GF66 12UD (RHEL-72703)
  - hwdb: map mic-mute key on Logitech K950 (Bluetooth) (RHEL-72703)
  - hwdb: Make Amlogic burn mode work out-of-box (RHEL-72703)
  - hwdb: add MSI Claw 8 EX AI+ CG3EM to keyboard hwdb list (RHEL-72703)
  - hwdb: sensor: Add Odys Windesk X10 accel mount matrix (RHEL-72703)
  - hwdb: classify PlayStation controller audio as controller form-factor (RHEL-72703)
  - hwdb: add numlock mapping for PATEN/Labtec USB Numpad (RHEL-72703)
  - hwdb: Add accelerometer matrix for OneXPlayer Super X (RHEL-72703)
  - hwdb: Fix Brazilian ABNT2 KEY_RO scancode for HP ProBook x360 435 G7 (#43151) (RHEL-72703)
  - hwdb: mark Microsoft Surface Type Cover touchpad as internal (#43262) (RHEL-72703)
  - hwdb: mark Adesso wireless keyboard trackball as trackball (#43263) (RHEL-72703)
  - hwdb: fix Lenovo B570e touchpad ABS ranges for edge scrolling (#43264) (RHEL-72703)
  - hwdb: mark ASUS ROG Flow Z13 (GZ302EA) touchpad as internal (RHEL-72703)
  - hwdb: Add accelerometer matrix for SHIFTbook 1 (RHEL-72703)
  - hwdb: Add HP EliteBook 845 G7 Fn+F11 airplane mode key mapping (RHEL-72703)
  - hwdb: Make Apple DebugUSB work out-of-box (RHEL-72703)
  - hwdb: mark Razer BlackShark V3 Pro as headset (RHEL-72703)
  - Update hwdb (RHEL-72703)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
changelog:
  - Rebase to version 8.1
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689
  - add sub-package for rdma module
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros
  - fix module linker flags using patch from
    https://github.com/valkey-io/valkey/pull/3344


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-9
changelog:
  - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-10
changelog:
  - Resolves: RHEL-159617 vim: Vim: Arbitrary code execution via command injection
    in glob() function


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-11
changelog:
  - RHEL-170124 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
    via path traversal bypass


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-2
changelog:
  - Fixing README file [RHEL-169757]
  - Resolves: RHEL-169757
    (Fix the README file: --announce-submounts is enabled by default)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-3
changelog:
  - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
    Resolves: https://redhat.atlassian.net/browse/RHEL-169759


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-4
changelog:
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
                 CVE-2026-34002, CVE-2026-34003
    Resolves: https://redhat.atlassian.net/browse/RHEL-163190
    Resolves: https://redhat.atlassian.net/browse/RHEL-163286
    Resolves: https://redhat.atlassian.net/browse/RHEL-163244


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-5
changelog:
  - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
                 CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
                 CVE-2026-50262, CVE-2026-50263
    Resolves: https://redhat.atlassian.net/browse/RHEL-182444


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-7
changelog:
  - CVE fix for: CVE-2026-55999, CVE-2026-56000
    Resolves: https://redhat.atlassian.net/browse/RHEL-191523
    Resolves: https://redhat.atlassian.net/browse/RHEL-191533


author: Jakub Martisko <jamartis@redhat.com> - 1:5.6.2-5
changelog:
  - Fix: a buffer overflow in lzma_index_append()
  - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environemnt)
  - Resolves: CVE-2026-34743


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


