# changelog

author: Jan Stancek <jstancek@redhat.com> [6.12.0-32.el10]
changelog:
  - selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov) [RHEL-48593]
  - redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik) [RHEL-48593]
  - redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik) [RHEL-48593]
  - redhat/spec: Do not use source fortification for selftests (Viktor Malik) [RHEL-48593]
  - redhat/spec: Fix BPF selftests build with PIE (Viktor Malik) [RHEL-48593]
  - redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov) [RHEL-48593]
  - selftests/bpf: Allow building with extra flags (Viktor Malik) [RHEL-48593]
  - selftests/bpf: Disable warnings on unused flags for Clang builds (Viktor Malik) [RHEL-48593]
  - bpftool: Prevent setting duplicate _GNU_SOURCE in Makefile (Viktor Malik) [RHEL-48593]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-33.el10]
changelog:
  - redhat: Re-enable CONFIG_INFINIBAND_VMWARE_PVRDMA for x86 (Vitaly Kuznetsov) [RHEL-41133]
  - HID: hyperv: streamline driver probe to avoid devres issues (Vitaly Kuznetsov) [RHEL-67329]
  - powerpc: security: Lock down the kernel if booted in secure boot mode (Mamatha Inamdar) [RHEL-57024]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-34.el10]
changelog:
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Jerry Snitselaar) [RHEL-67995]
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Fix typo "accelaration" (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Constify struct pm_status_row (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove faulty arbiter config reset (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-23197]
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Documentation: Mention --deepest-idle-state (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for hist (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for top (Tomas Glozar) [RHEL-40744]
  - rtla/utils: Add idle state disabling via libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Add optional dependency on libcpupower (Tomas Glozar) [RHEL-40744]
  - tools/build: Add libcpupower dependency detection (Tomas Glozar) [RHEL-40744]
  - mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [RHEL-67445]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-35.el10]
changelog:
  - redhat: gating.yaml: drop unstable test (Jan Stancek)
  - CI: provide pipelines for automotive variant (Julio Faracco)
  - fadump: reserve param area if below boot_mem_top (Mamatha Inamdar) [RHEL-67986]
  - powerpc/fadump: allocate memory for additional parameters early (Mamatha Inamdar) [RHEL-67986]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Steve Best) [RHEL-70009]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-60525]
  - RHEL: disable the btt driver (Jeff Moyer) [RHEL-68504]
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Alex Williamson) [RHEL-69745]
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-68542]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-36.el10]
changelog:
  - configs: synchronize CONFIG_HP_ILO between flavors & enable on x86/arm (Charles Mirabile) [RHEL-65590]
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70652]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (Thomas Huth) [RHEL-69815]
  - fsnotify: fix sending inotify event with unexpected filename (Ian Kent) [RHEL-68847]
  - Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: decouple basic ANA log page re-read support from native multipathing" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: nvme_mpath_init remove multipath check" (Benjamin Marzinski) [RHEL-68140]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-37.el10]
changelog:
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69747]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69747]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69737]
  - RHEL-only: mark ublk as tech preview (Ming Lei) [RHEL-50740]
  - Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" (Ming Lei) [RHEL-67720]
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-70861]
  - loop: fix type of block size (Ming Lei) [RHEL-65631]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70901]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70901]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70901]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70901]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70901]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix replenish_dl_new_period dl_server condition (Phil Auld) [RHEL-70901]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-69932]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69739]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22703]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22703]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-38.el10]
changelog:
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Cindy Lu) [RHEL-56981]
  - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize (Cindy Lu) [RHEL-56981]
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() (Cindy Lu) [RHEL-56981]
  - virtio_net: correct netdev_tx_reset_queue() invocation point (Cindy Lu) [RHEL-56981]
  - intel_idle: add Granite Rapids Xeon D support (David Arcari) [RHEL-68122]
  - sched/dlserver: Fix dlserver time accounting (Phil Auld) [RHEL-68342]
  - sched/dlserver: Fix dlserver double enqueue (Phil Auld) [RHEL-68342]
  - sched/fair: Fix NEXT_BUDDY (Phil Auld) [RHEL-68342]
  - sched/fair: Fix sched_can_stop_tick() for fair tasks (Phil Auld) [RHEL-68342]
  - sched/eevdf: More PELT vs DELAYED_DEQUEUE (Phil Auld) [RHEL-68342]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-39.el10]
changelog:
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (Steve Best) [RHEL-66570]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (Steve Best) [RHEL-66570]
  - redhat/configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen) [RHEL-51429]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-54644]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-54644]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-24140]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71374]
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-70278]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-70863]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-72691]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-24143]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-24143]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-24143]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-24143]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-40.el10]
changelog:
  - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-71139]
  - redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti) [RHEL-71905]
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-73371]
  - RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
  - redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti) [RHEL-70868]
  - qed: put cond_resched() in qed_dmae_operation_wait() (CKI Backport Bot) [RHEL-71560]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (CKI Backport Bot) [RHEL-71560]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (CKI Backport Bot) [RHEL-71560]
  - qed: make 'ethtool -d' 10 times faster (CKI Backport Bot) [RHEL-71560]
  - x86/sev: Convert shared memory back to private on kexec (Vitaly Kuznetsov) [RHEL-68482]
  - x86/mm: Refactor __set_clr_pte_enc() (Vitaly Kuznetsov) [RHEL-68482]
  - x86/boot: Skip video memory access in the decompressor for SEV-ES/SNP (Vitaly Kuznetsov) [RHEL-68482]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-41.el10]
changelog:
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-70301]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-73194]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-68691]
  - sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-67478]
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter) [RHEL-71827]
  - NFSD: Mark exports of NFS as unsupported (Benjamin Coddington) [RHEL-50656]
  - netdev-genl: Hold rcu_read_lock in napi_get (Paolo Abeni) [RHEL-73205]
  - net: avoid potential UAF in default_operstate() (Paolo Abeni) [RHEL-73205] {CVE-2024-56635}
  - net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73205] {CVE-2024-56658}
  - net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73205]
  - Revert "rtnetlink: add guard for RTNL" (Paolo Abeni) [RHEL-73205]
  - netlink: fix false positive warning in extack during dumps (Paolo Abeni) [RHEL-73205] {CVE-2024-53212}
  - tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-73143]
  - net: fix memory leak in tcp_conn_request() (Paolo Abeni) [RHEL-73143]
  - Revert "udp: avoid calling sock_def_readable() if possible" (Paolo Abeni) [RHEL-73132]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-69538]
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-72983]
  - KVM: arm64: Fix S1/S2 combination when FWB==1 and S2 has Device memory type (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Shaoqin Huang) [RHEL-68039]
  - tools: arm64: Grab a copy of esr.h from kernel (Shaoqin Huang) [RHEL-68039]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68039]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-42.el10]
changelog:
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-73195]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Vitaly Kuznetsov) [RHEL-71416]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Mark Salter) [RHEL-67684]
  - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation (Steve Best) [RHEL-68393]
  - net: sysctl: allow dump_cpumask to handle higher numbers of CPUs (Antoine Tenart) [RHEL-73199]
  - net: sysctl: do not reserve an extra char in dump_cpumask temporary buffer (Antoine Tenart) [RHEL-73199]
  - net: sysctl: remove always-true condition (Antoine Tenart) [RHEL-73199]
  - net: tcp: Add noinline_for_tracing annotation for tcp_drop_reason() (Antoine Tenart) [RHEL-73172]
  - compiler_types: Add noinline_for_tracing annotation (Antoine Tenart) [RHEL-73172]
  - net: vxlan: replace VXLAN_INVALID_HDR with VNI_NOT_FOUND (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in encap_bypass_if_local() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_encap_bypass() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add drop reasons support to vxlan_xmit_one() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_set_mac() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_snoop() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_remcsum() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Antoine Tenart) [RHEL-73172]
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - net: skb: add pskb_network_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - redhat: Install bpftool into BPF selftests dir (Viktor Malik) [RHEL-73480]
  - redhat: Drop bpftool from kernel spec (Viktor Malik) [RHEL-73480]
  - tools/power turbostat: Add initial support for GraniteRapids-D (Eddie Kovsky) [RHEL-29354]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Steve Best) [RHEL-73490] {CVE-2024-56739}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-73630]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (CKI Backport Bot) [RHEL-73198]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (CKI Backport Bot) [RHEL-73198]
  - net, team, bonding: Add netdev_base_features helper (CKI Backport Bot) [RHEL-73198]
  - bonding: add ESP offload features when slaves support (CKI Backport Bot) [RHEL-73198]
  - Documentation: bonding: add XDP support explanation (CKI Backport Bot) [RHEL-73198]
  - bonding: return detailed error when loading native XDP fails (CKI Backport Bot) [RHEL-73198]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-43.el10]
changelog:
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged (CKI Backport Bot) [RHEL-39340]
  - vfio/pci: Fallback huge faults for unaligned pfn (Alex Williamson) [RHEL-72822]
  - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context (Luis Claudio R. Goncalves) [RHEL-74342]
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-73395] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73395]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-25204]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-25204]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-47110]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-47110]
  - net/l2tp: fix warning in l2tp_exit_net found by syzbot (Guillaume Nault) [RHEL-73846]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73846]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73846]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-70187]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-70187]
  - futex: improve user space accesses (Waiman Long) [RHEL-70187]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-24144]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-24144]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-24144]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-24144]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-24144]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-24144]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-24144]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71264]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-44.el10]
changelog:
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74386]
  - redhat/configs: Disable deprecated CONFIG_LCS option on s390 (Mete Durlu) [RHEL-68296]
  - powerpc/pseries/iommu: Don't unset window if it was never set (Mamatha Inamdar) [RHEL-74222]
  - selftests: net: local_termination: require mausezahn (CKI Backport Bot) [RHEL-74034]
  - selftests: openvswitch: fix tcpdump execution (CKI Backport Bot) [RHEL-74034]
  - selftests: rds: move test.py to TEST_FILES (CKI Backport Bot) [RHEL-74034]
  - selftests: netfilter: Fix missing return values in conntrack_dump_flush (CKI Backport Bot) [RHEL-74034]
  - selftests: net: include lib/sh/*.sh with lib.sh (CKI Backport Bot) [RHEL-74034]
  - selftests: tls: add a selftest for wrapping rec_seq (CKI Backport Bot) [RHEL-74034]
  - selftests: ETS: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: TBF: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: RED: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: Add a fallback cleanup() (CKI Backport Bot) [RHEL-74034]
  - selftests: net: lib: Introduce deferred commands (CKI Backport Bot) [RHEL-74034]
  - selftests: net: move EXTRA_CLEAN of libynl.a into ynl.mk (CKI Backport Bot) [RHEL-74034]
  - selftests: net: rebuild YNL if dependencies changed (CKI Backport Bot) [RHEL-74034]
  - ipmr: tune the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix build with clang and DEBUG_NET disabled. (CKI Backport Bot) [RHEL-74037]
  - net/ipv6: release expired exception dst cached in socket (CKI Backport Bot) [RHEL-74037]
  - ipv6: avoid possible NULL deref in modify_prefix_route() (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ip6mr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ipmr: add debug check for mr table cleanup (CKI Backport Bot) [RHEL-74037]
  - selftests/rtnetlink.sh: add mngtempaddr test (CKI Backport Bot) [RHEL-74037]
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (CKI Backport Bot) [RHEL-74037]
  - selftests: net: really check for bg process completion (CKI Backport Bot) [RHEL-74037]
  - ipv6: release nexthop on device removal (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_acaddr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_addr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (CKI Backport Bot) [RHEL-74024]
  - ptp_pch: Replace deprecated PCI functions (CKI Backport Bot) [RHEL-74024]
  - wireguard: mark as Tech Preview (Hangbin Liu) [RHEL-74327]
  - nbd: fix partial sending (Ming Lei) [RHEL-74229]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-61740]
  - md: reintroduce md-linear (Nigel Croxon) [RHEL-74142]
  - Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" (Maxim Levitsky) [RHEL-55724 RHEL-56929] {CVE-2024-57839}
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-73034]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-45.el10]
changelog:
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: imbalance in flowtable binding (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_inner: incorrect percpu area handling under softirq (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CKI Backport Bot) [RHEL-73620]
  - netfilter: x_tables: fix LED ID check in led_tg_check() (CKI Backport Bot) [RHEL-73620]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-73620]
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CKI Backport Bot) [RHEL-73620]
  - netfilter: bpf: Pass string literal as format argument of request_module() (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list (CKI Backport Bot) [RHEL-73620]
  - mptcp: fix TCP options overflow. (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: sched: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - KVM: s390: add gen17 facilities to CPU model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add msa11 to cpu model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add concurrent-function facility to cpu model (Mete Durlu) [RHEL-24195]
  - redhat/configs: Re-enable full ZRAM configuration and all backends (Neal Gompa) [RHEL-72036]
  - wireguard: device: support big tcp GSO (CKI Backport Bot) [RHEL-74019]
  - wireguard: selftests: load nf_conntrack if not present (CKI Backport Bot) [RHEL-74019]
  - wireguard: allowedips: remove redundant selftest call (CKI Backport Bot) [RHEL-74019]
  - wireguard: device: omit unnecessary memset of netdev private data (CKI Backport Bot) [RHEL-74019]
  - bpf: Do not alloc arena on unsupported arches (Viktor Malik) [RHEL-68958]
  - powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74254]
  - MAINTAINERS: Make Kristen Accardi the IAA crypto driver maintainer (Vladis Dronov) [RHEL-58597]
  - crypto: iaa - Remove potential infinite loop in check_completion() (Vladis Dronov) [RHEL-58597]
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Mete Durlu) [RHEL-74467]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-46.el10]
changelog:
  - redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-74748]
  - xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64936]
  - redhat: create 'debug' addon for UKI (Li Tian) [RHEL-70836]
  - mptcp: disable by default (Davide Caratti) [RHEL-74247]
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-73366] {CVE-2024-53142}
  - redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-24135]
  - s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-24136]
  - s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-24136]
  - s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-24136]
  - s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-24135]
  - s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-24135]
  - s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-24135]
  - s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-24135]
  - s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-24135]
  - s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-24135]
  - ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-68933]
  - PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76026]
  - xfrm: mark packet offload as tech preview (Sabrina Dubroca) [RHEL-75472]
  - mm/kmemleak: fix sleeping function called from invalid context at print message (CKI Backport Bot) [RHEL-74104] {CVE-2024-57885}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74099] {CVE-2024-57884}
  - bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-73718]
  - selftests: drv-net: rss_ctx: Add test for ntuple rule (Michal Schmidt) [RHEL-73718]
  - bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-73718]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-47.el10]
changelog:
  - ipvlan: Support bonding events (Hangbin Liu) [RHEL-73828]
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CKI Backport Bot) [RHEL-74443] {CVE-2024-57929}
  - redhat/kernel.spec: work around find-debuginfo aborting cross builds (Jan Stancek) [RHEL-76454]
  - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMDand re-enable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Register modules as SIMD (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (Mamatha Inamdar) [RHEL-62818]
  - ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57893}
  - ALSA hda/realtek: Add quirk for Framework F111:000C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-73890]
  - Revert "ALSA: ump: Don't enumeration invalid groups for legacy rawmidi" (Jaroslav Kysela) [RHEL-73890]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: cs35l56: Remove calls to cs35l56_force_sync_asp1_registers_from_cache() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Fix wrong argument order for copy_from_iter() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Shut up truncated string warning (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Use standard helper for buffer accesses (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Update legacy substream names upon FB info update (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Indicate the inactive group in legacy substream names (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Don't open legacy substream for an inactive group (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57805}
  - ALSA: memalloc: prefer dma_mapping_error() over explicit address checking (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57800}
  - firmware: arm_scmi: Fix i.MX build dependency (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57880}
  - ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: tas2781: Fix calibration issue in stress test (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Fix the wrong return value (Jaroslav Kysela) [RHEL-73890]
  - ALSA: control: Avoid WARN() for symlink errors (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56657}
  - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly" (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: fix internal mic on Redmi G 2022 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: hdmi-codec: reorder channel allocation list (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Make mic volume workarounds globally applicable (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add quirk to exclude amplifier function (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add support for exclusion DAI quirks (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Use codec SSID matching for Lenovo devices (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: Use the new codec SSID matching (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Use own quirk lookup helper (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL. (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add extra PID for RME Digiface USB (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-73890]
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Notify xrun for low-latency mode (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: ump: Fix seq port updates per FB info notify (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Update ALC225 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53180}
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info (Jaroslav Kysela) [RHEL-73890]
  - ALSA: rawmidi: Fix kvfree() call in spinlock (Jaroslav Kysela) [RHEL-73890]
  - ASoC: da7213: Populate max_register to regmap_config (Jaroslav Kysela) [RHEL-73890]
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53150}
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53197}
  - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56685}
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56696}
  - ASoC: imx-audmix: Add NULL check in imx_audmix_probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53199}
  - ALSA: hda/realtek: Update ALC256 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56533}
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for cpu dai index logic (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for inconsistent indenting (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Jaroslav Kysela) [RHEL-73890]
  - RDMA/bnxt_re: Fix error recovery sequence (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Disable use of reserved wqes (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the check for 9060 condition (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max SGEs for the Work Request (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Remove always true dattr validity check (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Correct the sequence of device suspend (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Mohammad Heib) [RHEL-22876]
  - CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70288]
  - redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70288]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-48.el10]
changelog:
  - ALSA: Intel AVS audio hardware enablement for RHEL 10 (Jaroslav Kysela) [RHEL-72802]
  - gitlab-ci: remove superfluous test_debug/debug_architectures (Michael Hofmann)
  - redhat: update brew target for RHEL scratch builds (Jan Stancek)
  - iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain (Jerry Snitselaar) [RHEL-73411] {CVE-2024-56668}
  - iommu/vt-d: Remove cache tags before disabling ATS (Jerry Snitselaar) [RHEL-73411] {CVE-2024-56669}
  - iommufd: Fix out_fput in iommufd_fault_alloc() (Jerry Snitselaar) [RHEL-73411] {CVE-2024-56624}
  - iommu/vt-d: Fix checks and print in pgtable_walk() (Jerry Snitselaar) [RHEL-73411]
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes() (Jerry Snitselaar) [RHEL-73411]
  - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB (Jerry Snitselaar) [RHEL-73411]
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Jerry Snitselaar) [RHEL-73411] {CVE-2024-56568}
  - iommu/tegra241-cmdqv: Fix unused variable warning (Jerry Snitselaar) [RHEL-73411]
  - iommu/tegra241-cmdqv: Staticize cmdqv_debugfs_dir (Jerry Snitselaar) [RHEL-73411]
  - iommu/s390: Implement blocking domain (Jerry Snitselaar) [RHEL-73411] {CVE-2024-53232}
  - dmaengine: tegra: Return correct DMA status when paused (Jerry Snitselaar) [RHEL-73412]
  - dmaengine: dw: Select only supported masters for ACPI devices (Jerry Snitselaar) [RHEL-73412]
  - xfs: eliminate lockdep false positives in xfs_attr_shortform_list (Bill O'Donnell) [RHEL-46697]
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74227] {CVE-2024-57890}
  - ALSA: AMD audio hardware enablement for RHEL 10 (Jaroslav Kysela) [RHEL-64633]
  - redhat/configs: enable iBFT parsing on aarch64 (Chris Leech) [RHEL-75491]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-49.el10]
changelog:
  - Bluetooth: fix use-after-free in device_for_each_child() (CKI Backport Bot) [RHEL-76122] {CVE-2024-53237}
  - redhat/spec: Install all selftests in a single step (Viktor Malik) [RHEL-70889]
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (CKI Backport Bot) [RHEL-74009] {CVE-2024-56590}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (CKI Backport Bot) [RHEL-74053] {CVE-2024-53213}
  - mm/slub: Avoid list corruption when removing a slab from the full list (Rafael Aquini) [RHEL-73368] {CVE-2024-56566}
  - selinux: ignore unknown extended permissions (Ondrej Mosnacek) [RHEL-75632] {CVE-2024-57931}
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (Jocelyn Falempe) [RHEL-74282]
  - drm: adv7511: Drop dsi single lane support (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Wait for migration job before unmapping pages (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Use non-interruptible wait when moving BO to system (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: Correct the migration DMA map direction (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: use sjt mec fw on gfx943 for sriov (Jocelyn Falempe) [RHEL-74282]
  - drm/i915/dg1: Fix power gate sequence. (Jocelyn Falempe) [RHEL-74282]
  - drm/i915/cx0_phy: Fix C10 pll programming sequence (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Fix fault on fd close after unbind (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/pf: Use correct function to check LMEM provisioning (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Revert some changes that break a mesa debug tool (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix backport of commit 73dae652dcac (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Move the coredump registration to the worker thread (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Take PM ref in delayed snapshot capture worker (Jocelyn Falempe) [RHEL-74282]
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: fix racy memfd sealing check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/mmhub4.1: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/gfx12: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/nbio7.0: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/smu14.0.2: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/nbio7.7: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/nbio7.11: fix IP version check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: don't access invalid sched (Jocelyn Falempe) [RHEL-74282]
  - i915/guc: Accumulate active runtime on gt reset (Jocelyn Falempe) [RHEL-74282]
  - i915/guc: Ensure busyness counter increases motonically (Jocelyn Falempe) [RHEL-74282]
  - i915/guc: Reset engine utilization buffer before registration (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: synaptics-r63353: Fix regulator unbalance (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: st7701: Add prepare_prev_first flag to drm_panel (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference (Jocelyn Falempe) [RHEL-74282]
  - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: fix memory leak on last export_udmabuf() error path (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: udmabuf_create pin folio codestyle cleanup (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix amdgpu_coredump (Jocelyn Falempe) [RHEL-74282]
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Jocelyn Falempe) [RHEL-74282]
  - drm/amd: Update strapping for NBIO 2.5.0 (Jocelyn Falempe) [RHEL-74282]
  - drm/display: use ERR_PTR on DP tunnel manager creation fail (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/reg_sr: Remove register pool (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt (Jocelyn Falempe) [RHEL-74282]
  - amdgpu/uvd: get ring reference from rq scheduler (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: hard-code cacheline size for gfx11 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: Dereference null return value (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix when the cleaner shader is emitted (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: Set SMU v13.0.7 default workload type (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix UVD contiguous CS mapping problem (Jocelyn Falempe) [RHEL-74282]
  - drm/i915: Fix NULL pointer dereference in capture_engine (Jocelyn Falempe) [RHEL-74282]
  - drm/i915/color: Stop using non-posted DSB writes for legacy LUT (Jocelyn Falempe) [RHEL-74282]
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: pause autosuspend when creating pdd (Jocelyn Falempe) [RHEL-74282]
  - drm/xe: Call invalidation_fence_fini for PT inval fences in error state (Jocelyn Falempe) [RHEL-74282]
  - drm/panic: remove spurious empty line to clean warning (Jocelyn Falempe) [RHEL-74282]
  - Revert "drm/amd/display: parse umc_info or vram_info based on ASIC" (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: rework resume handling for display (v2) (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Add option to retrieve detile buffer size (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/devcoredump: Update handling of xe_force_wake_get return (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain() (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/guc: Copy GuC log prior to dumping (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/devcoredump: Add ASCII85 dump helper function (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/devcoredump: Improve section headings and add tile info (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/devcoredump: Use drm_puts and already cached local variables (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Prune Invalid Modes For HDMI Output (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: parse umc_info or vram_info based on ASIC (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Remove hw w/a toggle if on DP2/HPO (Jocelyn Falempe) [RHEL-74282]
  - drm/panic: Add ABGR2101010 support (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix underflow when playing 8K video in full screen mode (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2 (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Adding array index check to prevent memory corruption (Jocelyn Falempe) [RHEL-74282]
  - drm/sched: memset() 'job' in drm_sched_job_init() (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Full exit out of IPS2 when all allow signals have been cleared (Jocelyn Falempe) [RHEL-74282]
  - drm/display: Fix building with GCC 15 (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/xe3: Add initial set of workarounds (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/ptl: L3bank mask is not available on the media GT (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: disable SG displays on cyan skillfish (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix garbage or black screen when resetting otg (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: skip disable CRTC in seemless bootup case (Jocelyn Falempe) [RHEL-74282]
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: it6505: Enable module autoloading (Jocelyn Falempe) [RHEL-74282]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (Jocelyn Falempe) [RHEL-74282]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (Jocelyn Falempe) [RHEL-74282]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/pciid: Add new PCI id for ARL (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/pciids: Add PVC's PCI device ID macros (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/pciids: separate ARL and MTL PCI IDs (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/pciids: separate RPL-U and RPL-P PCI IDs (Jocelyn Falempe) [RHEL-74282]
  - dma-fence: Use kernel's sort for merging fences (Jocelyn Falempe) [RHEL-74282]
  - dma-fence: Fix reference leak on fence merge failure path (Jocelyn Falempe) [RHEL-74282]
  - dma-buf: fix dma_fence_array_signaled v4 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/hdp7.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Limit VTotal range to max hw cap minus fp (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Correct prefetch calculation (Jocelyn Falempe) [RHEL-74282]
  - drm/dp_mst: Fix resetting msg rx state after topology removal (Jocelyn Falempe) [RHEL-74282]
  - drm/dp_mst: Verify request type in the corresponding down message reply (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: fix and simplify workload handling (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12 (Jocelyn Falempe) [RHEL-74282]
  - drm/dp_mst: Fix MST sideband message body length check (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: hard-code cacheline for gc943,gc944 (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Ignore scalar validation failure if pipe is phantom (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: calculate final viewport before TAP optimization (Jocelyn Falempe) [RHEL-74282]
  - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs" (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: update pipe selection policy to check head pipe (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix handling of plane refcount (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: Remove arcturus min power limit (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3 (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (Jocelyn Falempe) [RHEL-74282]
  - drm/amd: Fix initialization mistake for NBIO 7.11 devices (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/pm: skip setting the power source on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix usage slab after free (Jocelyn Falempe) [RHEL-74282]
  - drm/amd: Add some missing straps from NBIO 7.11.0 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: Use the correct wptr size (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/guc_submit: fix race around suspend_pending (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE (Jocelyn Falempe) [RHEL-74282]
  - Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable" (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/migrate: fix pat index usage (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: it6505: Fix inverted reset polarity (Jocelyn Falempe) [RHEL-74282]
  - drm/fbdev-dma: Select FB_DEFERRED_IO (Jocelyn Falempe) [RHEL-74282]
  - drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member (Jocelyn Falempe) [RHEL-74282]
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Jocelyn Falempe) [RHEL-74282]
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Jocelyn Falempe) [RHEL-74282]
  - drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/ufence: Wake up waiters after setting ufence->signalled (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Jocelyn Falempe) [RHEL-74282]
  - drm/radeon: Fix spurious unplug event on radeon HDMI (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: Fix map/unmap queue logic (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: fix ACA bank count boundary check error (Jocelyn Falempe) [RHEL-74282]
  - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation (Jocelyn Falempe) [RHEL-74282]
  - drm/panthor: record current and maximum device clock frequencies (Jocelyn Falempe) [RHEL-74282]
  - drm/panthor: introduce job cycle and timestamp accounting (Jocelyn Falempe) [RHEL-74282]
  - drm: use ATOMIC64_INIT() for atomic64_t (Jocelyn Falempe) [RHEL-74282]
  - drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() (Jocelyn Falempe) [RHEL-74282]
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (Jocelyn Falempe) [RHEL-74282]
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Reduce HPD Detection Interval for IPS (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Increase idle worker HPD detection time (Jocelyn Falempe) [RHEL-74282]
  - drm/xe/hdcp: Fix gsc structure check in fw check status (Jocelyn Falempe) [RHEL-74282]
  - drm: panel: nv3052c: correct spi_device_id for RG35XX panel (Jocelyn Falempe) [RHEL-74282]
  - drm/panic: Select ZLIB_DEFLATE for DRM_PANIC_SCREEN_QR_CODE (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: tc358767: Fix link properties discovery (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: fix a memleak issue when driver is removed (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: it6505: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-74282]
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module (Jocelyn Falempe) [RHEL-74282]
  - drm/amdgpu: Fix JPEG v4.0.3 register write (Jocelyn Falempe) [RHEL-74282]
  - drm/panel: nt35510: Make new commands optional (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: fix vmap_udmabuf error page set (Jocelyn Falempe) [RHEL-74282]
  - udmabuf: change folios array from kmalloc to kvmalloc (Jocelyn Falempe) [RHEL-74282]
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Fix incorrect DSC recompute trigger (Jocelyn Falempe) [RHEL-74282]
  - drm/amd/display: Skip Invalid Streams from DSC Policy (Jocelyn Falempe) [RHEL-74282]
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (Rafael Aquini) [RHEL-73367] {CVE-2024-53160}
  - not upstream: Set vdso is_ready later during boot process (Herbert Xu) [RHEL-76765]
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets (CKI Backport Bot) [RHEL-74124] {CVE-2025-21629}
  - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-66201]
  - Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74114] {CVE-2024-57894}
  - cxl/pci: Check dport->regs.rcd_pcie_cap availability before accessing (Myron Stowe) [RHEL-70563]
  - cxl/pci: Add sysfs attribute for CXL 1.1 device link status (Myron Stowe) [RHEL-70563]
  - cxl/core/regs: Add rcd_pcie_cap initialization (Myron Stowe) [RHEL-70563]
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (CKI Backport Bot) [RHEL-76123] {CVE-2024-53208}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-50.el10]
changelog:
  - redhat: set aarch64 variants of kernel-rt as Tech Preview (Luis Claudio R. Goncalves) [RHEL-77120]
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72808]
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72808]
  - rtla/osnoise: Distinguish missing workload option (Tomas Glozar) [RHEL-72808]
  - drm/ast: Fix ast_dp connection status (Jocelyn Falempe) [RHEL-73063]
  - NFSD: add cb opcode to WARN_ONCE on failed callback (Olga Kornievskaia) [RHEL-56888]
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Olga Kornievskaia) [RHEL-56888]
  - wifi: iwlwifi: bump FW API to 94 for BZ/SC devices (CKI Backport Bot) [RHEL-75880]
  - bpf, sockmap: Fix race between element replace and close() (Felix Maurer) [RHEL-72484]
  - xsk: Free skb when TX metadata options are invalid (Felix Maurer) [RHEL-72484]
  - xsk: always clear DMA mapping information when unmapping the pool (Felix Maurer) [RHEL-72484]
  - bpf: fix OOB devmap writes when deleting elements (Felix Maurer) [RHEL-72484]
  - xsk: fix OOB map writes when deleting elements (Felix Maurer) [RHEL-72484]
  - rtla: Report missed event count (Tomas Glozar) [RHEL-67557]
  - rtla: Add function to report missed events (Tomas Glozar) [RHEL-67557]
  - rtla: Count all processed events (Tomas Glozar) [RHEL-67557]
  - rtla: Count missed trace events (Tomas Glozar) [RHEL-67557]
  - tools/rtla: Add osnoise_trace_is_off() (Tomas Glozar) [RHEL-67557]
  - rtla/timerlat_top: Abort event processing on second signal (Tomas Glozar) [RHEL-67557]
  - rtla/timerlat_hist: Abort event processing on second signal (Tomas Glozar) [RHEL-67557]
  - rtla/timerlat_top: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-67557]
  - rtla/timerlat_hist: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-67557]
  - rtla: Add trace_instance_stop (Tomas Glozar) [RHEL-67557]
  - netlink: typographical error in nlmsg_type constants definition (CKI Backport Bot) [RHEL-76481]
  - net: sched: refine software bypass handling in tc_run (Xin Long) [RHEL-56246]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-51.el10]
changelog:
  - redhat: fix build/install targets in netfilter kselftest (Hangbin Liu) [RHEL-58105]
  - selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from environment (Hangbin Liu) [RHEL-58105]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Hangbin Liu) [RHEL-58105]
  - fs/nfs: fix missing declaration of nfs_idmap_cache_timeout (Olga Kornievskaia) [RHEL-74415]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Olga Kornievskaia) [RHEL-74415]
  - nfsd: restore callback functionality for NFSv4.0 (Olga Kornievskaia) [RHEL-74415]
  - NFSD: fix management of pending async copies (Olga Kornievskaia) [RHEL-74415]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Olga Kornievskaia) [RHEL-74415]
  - fs/nfs/io: make nfs_start_io_*() killable (Olga Kornievskaia) [RHEL-74415]
  - nfs/blocklayout: Limit repeat device registration on failure (Olga Kornievskaia) [RHEL-74415]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Olga Kornievskaia) [RHEL-74415]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Olga Kornievskaia) [RHEL-74415]
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Olga Kornievskaia) [RHEL-74415]
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Olga Kornievskaia) [RHEL-74415]
  - nfs: ignore SB_RDONLY when mounting nfs (Olga Kornievskaia) [RHEL-74415]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Olga Kornievskaia) [RHEL-74415]
  - Revert "fs: nfs: fix missing refcnt by replacing folio_set_private by folio_attach_private" (Olga Kornievskaia) [RHEL-74415]
  - nfs/localio: must clear res.replen in nfs_local_read_done (Olga Kornievskaia) [RHEL-74415]
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Olga Kornievskaia) [RHEL-74415]
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid() (Olga Kornievskaia) [RHEL-74415]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Olga Kornievskaia) [RHEL-74415]
  - sunrpc: remove newlines from tracepoints (Olga Kornievskaia) [RHEL-74415]
  - nfs: Annotate struct pnfs_commit_array with __counted_by() (Olga Kornievskaia) [RHEL-74415]
  - nfs/localio: eliminate need for nfs_local_fsync_work forward declaration (Olga Kornievskaia) [RHEL-74415]
  - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter (Olga Kornievskaia) [RHEL-74415]
  - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx (Olga Kornievskaia) [RHEL-74415]
  - nfs/localio: remove redundant suid/sgid handling (Olga Kornievskaia) [RHEL-74415]
  - NFS: Implement get_nfs_version() (Olga Kornievskaia) [RHEL-74415]
  - NFS: Clean up find_nfs_version() (Olga Kornievskaia) [RHEL-74415]
  - NFS: Rename get_nfs_version() -> find_nfs_version() (Olga Kornievskaia) [RHEL-74415]
  - NFS: Convert the NFS module list into an array (Olga Kornievskaia) [RHEL-74415]
  - NFS: Clean up locking the nfs_versions list (Olga Kornievskaia) [RHEL-74415]
  - nfsd: allow for up to 32 callback session slots (Olga Kornievskaia) [RHEL-74415]
  - nfs_common: must not hold RCU while calling nfsd_file_put_local (Olga Kornievskaia) [RHEL-74415]
  - nfsd: get rid of include ../internal.h (Olga Kornievskaia) [RHEL-74415]
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Add nfsd4_copy time-to-live (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Add a laundromat reaper for async copy state (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Block DESTROY_CLIENTID only when there are ongoing async COPY operations (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Handle an NFS4ERR_DELAY response to CB_OFFLOAD (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Free async copy information in nfsd4_cb_offload_release() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Fix nfsd4_shutdown_copy() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Add a tracepoint to record canceled async COPY operations (Olga Kornievskaia) [RHEL-74415]
  - nfsd: make nfsd4_session->se_flags a bool (Olga Kornievskaia) [RHEL-74415]
  - nfsd: remove nfsd4_session->se_bchannel (Olga Kornievskaia) [RHEL-74415]
  - nfsd: make use of warning provided by refcount_t (Olga Kornievskaia) [RHEL-74415]
  - nfsd: Don't fail OP_SETCLIENTID when there are too many clients. (Olga Kornievskaia) [RHEL-74415]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Remove program_stat_to_errno() call sites (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Update the files included in client-side source code (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Remove check for "nfs_ok" in C templates (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Remove tracepoint call site (Olga Kornievskaia) [RHEL-74415]
  - nfsd: release svc_expkey/svc_export with rcu_work (Olga Kornievskaia) [RHEL-74415]
  - SUNRPC: make sure cache entry active before cache_show (Olga Kornievskaia) [RHEL-74415]
  - nfsd: make sure exp active before svc_export_show (Olga Kornievskaia) [RHEL-74415]
  - lockd: Remove unneeded initialization of file_lock::c.flc_flags (Olga Kornievskaia) [RHEL-74415]
  - lockd: Remove unused parameter to nlmsvc_testlock() (Olga Kornievskaia) [RHEL-74415]
  - lockd: Remove some snippets of unfinished code (Olga Kornievskaia) [RHEL-74415]
  - lockd: Remove unnecessary memset() (Olga Kornievskaia) [RHEL-74415]
  - lockd: Remove unused typedef (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove unused values from nfsd4_encode_components_esc() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove unused results in nfsd4_encode_pathname4() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove a never-true comparison (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove dead code in nfsd4_create_session() (Olga Kornievskaia) [RHEL-74415]
  - nfsd: refine and rename NFSD_MAY_LOCK (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() (Olga Kornievskaia) [RHEL-74415]
  - nfsd: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Add a utility for extracting XDR from RFCs (Olga Kornievskaia) [RHEL-74415]
  - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT (Olga Kornievskaia) [RHEL-74415]
  - nfsd: Fill NFSv4.1 server implementation fields in OP_EXCHANGE_ID response (Olga Kornievskaia) [RHEL-74415]
  - lockd: Fix comment about NLMv3 backwards compatibility (Olga Kornievskaia) [RHEL-74415]
  - nfsd: new tracepoint for after op_func in compound processing (Olga Kornievskaia) [RHEL-74415]
  - nfsd: have nfsd4_deleg_getattr_conflict pass back write deleg pointer (Olga Kornievskaia) [RHEL-74415]
  - nfsd: drop the nfsd4_fattr_args "size" field (Olga Kornievskaia) [RHEL-74415]
  - nfsd: drop the ncf_cb_bmap field (Olga Kornievskaia) [RHEL-74415]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: emit maxsize macros (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Add generator code for XDR width macros (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for union types (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for pointer types (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for struct types (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for typedef (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for optional_data type (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for variable-length array (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for fixed-length array (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for a string (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for variable-length opaque (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR width for fixed-length opaque (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: XDR widths for enum types (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Keep track of on-the-wire data type widths (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Track constant values (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Refactor transformer arms (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Implement big-endian enums (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Rename "enum yada" types as just "yada" (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Rename enum's declaration Jinja2 template (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Rename "variable-length strings" (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Clean up type_specifier (Olga Kornievskaia) [RHEL-74415]
  - xdrgen: Exit status should be zero on success (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove unused function parameter (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Remove unnecessary posix_acl_entry pointer initialization (Olga Kornievskaia) [RHEL-74415]
  - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-74415]
  - NFSD: Prevent a potential integer overflow (Olga Kornievskaia) [RHEL-74415]
  - rhel-10: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - exfat: fix the infinite loop in exfat_readdir() (CKI Backport Bot) [RHEL-75669] {CVE-2024-57940}
  - exfat: fix the new buffer was not zeroed before writing (CKI Backport Bot) [RHEL-75662] {CVE-2024-57943}
  - redhat/configs: Enable Intel Bluetooth PCIE drivers (Bastien Nocera) [RHEL-76105]
  - Bluetooth: Use str_enable_disable-like helpers (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel_pcie: remove redundant assignment to variable ret (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel: Do no pass vendor events to stack (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel_pcie: Remove deadcode (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel_pcie: Add recovery mechanism (Bastien Nocera) [RHEL-76105]
  - Bluetooth: btintel_pcie: Add handshake between driver and firmware (Bastien Nocera) [RHEL-76105]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-76105]
  - net: atlantic: use irq_update_affinity_hint() (CKI Backport Bot) [RHEL-77809]
  - tipc: fix NULL deref in cleanup_bearer() (Xin Long) [RHEL-77768]
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (CKI Backport Bot) [RHEL-77768] {CVE-2024-56642}
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-70687]
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz) [RHEL-33859]
  - build:  remove localversion-rt from git tree (Clark Williams) [RHEL-73163]
  - net: Fix icmp host relookup triggering ip_rt_bug (CKI Backport Bot) [RHEL-77765] {CVE-2024-56647}
  - redhat/configs: Default to batched invalidation on s390 (Jerry Snitselaar) [RHEL-75486]
  - redhat/configs: disable CONFIG_TCP_AO (Sabrina Dubroca) [RHEL-77608]


author: Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-51.el9
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - lpfc: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: Jan Stancek <jstancek@redhat.com> [6.12.0-52.el10]
changelog:
  - x86/tdx: Enable CPU topology enumeration (Vitaly Kuznetsov) [RHEL-29350]
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs (Vitaly Kuznetsov) [RHEL-29350]
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (Vitaly Kuznetsov) [RHEL-29350]
  - x86/tdx: Introduce wrappers to read and write TD metadata (Vitaly Kuznetsov) [RHEL-29350]
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Xin Long) [RHEL-75624] {CVE-2024-57938}
  - tools: ynl: extend CFLAGS to keep options from environment (Hangbin Liu) [RHEL-50389]
  - tools: ynl: add script dir to sys.path (Hangbin Liu) [RHEL-50389]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76330]
  - ASoC: mediatek: disable buffer pre-allocation (Jaroslav Kysela) [RHEL-76330]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76330]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76330]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76330]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76330]
  - Enable DRM_XE related kconfig options (Mika Penttilä) [RHEL-54134]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-76137] {CVE-2024-56663}
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74091] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74052] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74044] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74051] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74050] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-73819 RHEL-74048] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: mwifiex: add missing locking for cfg80211 calls (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73819]
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-29554]
  - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-29554]
  - idpf: set completion tag for "empty" bufs associated with a packet (Michal Schmidt) [RHEL-29554]
  - idpf: Don't hard code napi_struct size (Michal Schmidt) [RHEL-29554]
  - perf trace: Keep exited threads for summary (Michael Petlan) [RHEL-62340]
  - block: Prevent potential deadlocks in zone write plug error recovery (Ming Lei) [RHEL-71495]
  - dm: Fix dm-zoned-reclaim zone write pointer alignment (Ming Lei) [RHEL-71495]
  - block: Ignore REQ_NOWAIT for zone reset and zone finish operations (Ming Lei) [RHEL-71495]
  - block: Use a zone write plug BIO work for REQ_NOWAIT BIOs (Ming Lei) [RHEL-71495]
  - block: Prevent potential deadlock in blk_revalidate_disk_zones() (Ming Lei) [RHEL-71495]
  - block: Switch to using refcount_t for zone write plugs (Ming Lei) [RHEL-71495]
  - block: Add a public bdev_zone_is_seq() helper (Ming Lei) [RHEL-71495]
  - block: RCU protect disk->conv_zones_bitmap (Ming Lei) [RHEL-71495]
  - redhat/configs: coresight: Clean up coresight configs (Mark Salter) [RHEL-78271]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-53.el10]
changelog:
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-73893]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-73893]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-73893]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-73893]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-73893]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-73893]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-73893]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-73893]
  - redhat/configs: disable CONFIG_AF_UNIX_OOB on RHEL (Davide Caratti) [RHEL-76804]
  - af_unix: Add a prompt to CONFIG_AF_UNIX_OOB (Davide Caratti) [RHEL-76804]
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Short-circuit all of kvm_apic_set_base() if MSR value is unchanged (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Unpack msr_data structure prior to calling kvm_apic_set_base() (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Make kvm_recalculate_apic_map() local to lapic.c (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Rename APIC base setters to better capture their relationship (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Move kvm_set_apic_base() implementation to lapic.c (from x86.c) (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Inline kvm_get_apic_mode() in lapic.h (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base() (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Drop superfluous kvm_lapic_set_base() call when setting APIC state (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Short-circuit all kvm_lapic_set_base() if MSR value isn't changing (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Use '0' for guest RIP if PMI encounters protected guest state (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Add lockdep-guarded asserts on register cache usage (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Bypass register cache when querying CPL from kvm_sched_out() (Maxim Levitsky) [RHEL-71725]
  - KVM: x86: Ensure vcpu->mode is loaded from memory in kvm_vcpu_exit_request() (Maxim Levitsky) [RHEL-71725]
  - KVM: Allow calling kvm_release_page_{clean,dirty}() on a NULL page pointer (Maxim Levitsky) [RHEL-71725]
  - KVM: Drop KVM_ERR_PTR_BAD_PAGE and instead return NULL to indicate an error (Maxim Levitsky) [RHEL-71725]
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33308]
  - wifi: ath12k: fix crash when unbinding (Jose Ignacio Tornos Martinez) [RHEL-70414]
  - wifi: ath12k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-70414]
  - nvmet: Don't overflow subsysnqn (Maurizio Lombardi) [RHEL-74084] {CVE-2024-53681}
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-74490]
  - mm/vmscan: accumulate nr_demoted for accurate demotion statistics (Herton R. Krzesinski) [RHEL-71335]
  - mm: vmscan : pgdemote vmstat is not getting updated when MGLRU is enabled. (Herton R. Krzesinski) [RHEL-71335]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-54.el10]
changelog:
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-76120] {CVE-2024-56611}
  - Revert "redhat: gating.yaml: drop unstable test" (Jan Stancek)
  - nvme: remove multipath module parameter (Bryan Gurney) [RHEL-78133]
  - NFSD: Fix CB_GETATTR status fix (Olga Kornievskaia) [RHEL-56888]
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CKI Backport Bot) [RHEL-78517] {CVE-2024-57949}
  - erofs: promote to full support (Ian Kent) [RHEL-78322]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78388]
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78388]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78388]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78388]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78388]
  - rxrpc: Improve setsockopt() handling of malformed user input (Marc Dionne) [RHEL-78388]
  - afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-78388]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78388]
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78152]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78152]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78152]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78152]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78152]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78152]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-78152]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78152]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78152]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78152]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78152]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78152]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78152]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78152]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-78152]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-78152]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-78152]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-78152]
  - smb: fix bytes written value in /proc/fs/cifs/Stats (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-78152] {CVE-2024-54680}
  - smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig (Paulo Alcantara) [RHEL-78152]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-78152]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-78152]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-78152]
  - cifs: Fix rmdir failure due to ongoing I/O on deleted file (Paulo Alcantara) [RHEL-78152]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-78152]
  - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-78152]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-78152]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-78152]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-78152]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-78152]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-78152]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-78152]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-78152]
  - smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-78152] {CVE-2024-56729}
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-78152] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-78152]
  - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
  - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-78152]
  - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
  - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-78152]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-78152]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-78152]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-78152]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-78152]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-78152]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-78152]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-78152]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-78152]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-78152]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-78152]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-78152] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-78152] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-78152]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-78152]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-78152]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-78152]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-78152]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-78152]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-78152]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-78152]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-78152]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-78152]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-78152]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-78152]
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Viktor Malik) [RHEL-78209]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-77959]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-77959]
  - kasan: make kasan_record_aux_stack_noalloc() the default behaviour (Waiman Long) [RHEL-71050]
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74109] {CVE-2024-57888}
  - smb: client: fix double free of TCP_Server_Info::hostname (CKI Backport Bot) [RHEL-77236] {CVE-2025-21673}
  - arm64: Force CONFIG_ARCH_FORCE_MAX_ORDER of 4k kernel to 12 (Waiman Long) [RHEL-67530]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77048]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-44575]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-44575]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-44575]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-44575]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-44575]
  - ext4: force disable fscrypt feature (Brian Foster) [RHEL-64637]
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (Paolo Bonzini) [RHEL-45114]
  - iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75944]
  - iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75944]
  - iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75944]
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75944]
  - iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75944]
  - smb: client: fix use-after-free of signing key (CKI Backport Bot) [RHEL-76126] {CVE-2024-53179}
  - smb: client: fix NULL ptr deref in crypto_aead_setkey() (CKI Backport Bot) [RHEL-76124] {CVE-2024-53185}
  - redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek) [RHEL-63081]
  - tools/net/ynl: ethtool: support spec load from install location (Jan Stancek) [RHEL-63081]
  - tools/net/ynl: add support for --family and --list-families (Jan Stancek) [RHEL-63081]
  - tools: ynl: add main install target (Jan Stancek) [RHEL-63081]
  - tools: ynl: add install target for generated content (Jan Stancek) [RHEL-63081]
  - tools: ynl: add initial pyproject.toml for packaging (Jan Stancek) [RHEL-63081]
  - tools: ynl: move python code to separate sub-directory (Jan Stancek) [RHEL-63081]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use %autosetup instead of the previous %setup and %patch macros.
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-4
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - virt-host-validate: Allow longer list of CPU flags
  - vmx: Be even more lax when trying to comprehend serial ports
  - vmx: Do not require all ID data for VMWare Distributed Switch
  - tests: vhostuser: add virtiofsd json descriptor
  - tests: qemuxmlconf: adjust test case to new virtiofsd
  - qemu: fill capabilities for virtiofsd
  - qemu: do not use deprecated options for new virtiofsd
  - qemu: migration: allow migration for virtiofs
  - virt-host-validate: Drop extra "PASS"
  - qemu: Don't leave beingDestroyed=true on inactive domain


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - qemu: virtiofs: cache: use 'never' instead of 'none'
  - qemu_domain: Strip <acpi/> from s390(x) definitions
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390
  - vsh: Allow vshReadlineInit() to be called multiple times


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-45518, RHEL-49607, RHEL-50968, RHEL-52449, RHEL-54235
      RHEL-55707, RHEL-55749, RHEL-55769, RHEL-56699


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61752)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61752)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61752)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61752)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61752)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-29893)
  - The rebase also fixes the following bugs:
      RHEL-30177, RHEL-35244, RHEL-39024


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20220807.0-1
changelog:
  - Update to 20220807.0
    - If your applications rely on portability to Windows, see new documentation
      sections "argument-passing rules are program-specific" and "batch files"
      - This release fixes bugs in runs of Windows programs that use standard
        command line parsing rules
      - Runs of non-standard programs may require changes; notable non-standard
        programs include cmd.exe, cscript.exe, and Cygwin programs
    - Skip t/pty.t test on NetBSD too (GH#140)
    - Add strict/warnings
    - Follow Windows argument quoting rules (GH#142)
    - Allow win32_newlines.t to actually run (GH#146)
    - Make t/pty.t test pass on OpenBSD (GH#150)
    - Support Win32 commands having non-standard command line parsing rules
      (GH#148)
    - Support executing Win32 batch files
    - Add IPC::Run::Win32Process, for delivering non-standard command lines
    - Fix reporting of Win32::Process::Create() errors
    - On Windows, avoid hang when closing read end of pipe (GH#156)
    - Ignore known test failure on msys - t/windows_search_path.t (GH#155)
    - Avoid warning with IPCRUNDEBUG, in Windows spawned children
    - Use $^X, not 'perl', in tests
    - Thanks to the new active developer: Noah Misch!


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-4.el10.s390x macro
  - Update license to SPDX format


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.s390x macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37 (#2118006)
    - Allow duplicate warnings when using warnings_exist (GH#8)
  - Use author-independent source URL
  - Use SPDX license expression


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-4
changelog:
  - Related: RHEL-59777 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-59659 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-61636 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-61723 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-63325 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-66599 vault-add fails in FIPS mode
  - Resolves: RHEL-66598 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-66597 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66595 Sentences truncated in man pages
  - Resolves: RHEL-66592 IDP configuration in the IdM WebUI shows Organization is required
  - Resolves: RHEL-65650 ipa-server-install with setup-dns fails 'job for ipa.service failed because the control process exited with error code'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-69300 Support GSSAPI in Cockpit on IPA servers
  - Resolves: RHEL-68447 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-57674 Use RSNv3 and enable cert pruning by default in RHEL 10.0


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-70759 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70477 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-70253 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
  - Resolves: RHEL-69926 add support for python cryptography 44.0.0
  - Resolves: RHEL-69635 All user groups are not being included during HSM token validation


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking
  - Resolves: RHEL-71964 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file
  - Resolves: RHEL-71262 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67190 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-75658 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-74466 kinit with external idp user is failing


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-12
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests


author: Julien Rische <jrische@redhat.com> - 4.12.1-1
changelog:
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-2
changelog:
  - Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  - Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-3
changelog:
  - Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
  - Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-47157 ipa-migrate -V options fails to display version
  - Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-4
changelog:
  - Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52305 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
  - Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54545 Covscan issues: Resource Leak
  - Resolves: RHEL-54304 support for python cryptography 43.0.0
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-46897 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Resolves: RHEL-47294 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-56472 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-56917 RFE add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-56965 Backport test fixes in python3-ipatests
  - Resolves: RHEL-58067 ipa replication installation fails in FIPS mode on rhel10
  - Resolves: RHEL-59265 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-59266 Also enable SSSD's ssh service when enabling sss_ssh_knownhosts


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-2
changelog:
  - Switched from bcond to bcond_with for compatibility with el8 and el9
  - haproxy builddep on systems with haproxy2
  - Disable pcre2-jit only for fedora <= 37 on 32bit x86


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-1
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-2
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


