# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-89.el10]
changelog:
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito) [RHEL-92881]
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito) [RHEL-92881]
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito) [RHEL-92881]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-92882]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89852]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87906] {CVE-2025-21962}
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90551]
  - scsi: qla4xxx: Constify 'struct bin_attribute' (Chris Leech) [RHEL-90551]
  - scsi: qedi: Constify 'struct bin_attribute' (Chris Leech) [RHEL-90551]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90551]
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87978] {CVE-2025-22055}
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-70101 RHEL-83227] {CVE-2025-21864}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-90.el10]
changelog:
  - gre: Fix again IPv6 link-local address generation. (Guillaume Nault) [RHEL-69103]
  - zram: fix NULL pointer in comp_algorithm_show() (Ming Lei) [RHEL-77764] {CVE-2024-53222}
  - HID: picoLCD: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Simplify hvfb_putmem (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (Jocelyn Falempe) [RHEL-75959]
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (Jocelyn Falempe) [RHEL-75959]
  - fbdev: lcdcfb: Use backlight helper (Jocelyn Falempe) [RHEL-75959]
  - fbdev: vga16fb: fix orig_video_isVGA confusion (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use syscon_regmap_lookup_by_phandle_args (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use of_property_present() to test existence of DT property (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sm501fb: Use str_enabled_disabled() helper in sm501fb_init_fb() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omap: use threaded IRQ for LCD DMA (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: efifb: Change the return value type to void (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Remove unused hdmi5_core_handle_irqs (Jocelyn Falempe) [RHEL-75959]
  - video: hdmi: Remove unused hdmi_infoframe_check (Jocelyn Falempe) [RHEL-75959]
  - fbdev: radeon: Use const 'struct bin_attribute' callbacks (Jocelyn Falempe) [RHEL-75959]
  - fbdev: udlfb: Use const 'struct bin_attribute' callback (Jocelyn Falempe) [RHEL-75959]
  - fbdev: Fix recursive dependencies wrt BACKLIGHT_CLASS_DEVICE (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Remove some deadcode (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: use new of_graph functions (Jocelyn Falempe) [RHEL-75959]
  - backlight: Remove notifier (Jocelyn Falempe) [RHEL-75959]
  - backlight: ktz8866: Fix module autoloading (Jocelyn Falempe) [RHEL-75959]
  - backlight: 88pm860x_bl: Simplify with scoped for each OF child loop (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Remove struct fb_videomode from set_mode callback (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Replace check_fb with controls_device (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omap: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: imxfb: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: imxfb: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - fbdev: clps711x-fb: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: clps711x-fb: Replace check_fb in favor of struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: tdo24m: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Remove match_fb from struct plat_lcd_data (Jocelyn Falempe) [RHEL-75959]
  - backlight: platform_lcd: Remove include statement for <linux/backlight.h> (Jocelyn Falempe) [RHEL-75959]
  - backlight: otm3225a: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: ltv350qv: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms501kf03: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms501kf03: Remove unnecessary include of <linux/backlight.h> (Jocelyn Falempe) [RHEL-75959]
  - backlight: lms283gf05: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: l4f00242t03: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: jornada720_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: jornada720_lcd: Include <linux/io.h> for IOMEM() macro (Jocelyn Falempe) [RHEL-75959]
  - backlight: ili9320: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: ili922x: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: hx8357: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: corgi_lcd: Use lcd power constants (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Add LCD_POWER_ constants for power states (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Test against struct fb_info.lcd_dev (Jocelyn Falempe) [RHEL-75959]
  - backlight: lcd: Rearrange code in fb_notifier_callback() (Jocelyn Falempe) [RHEL-75959]
  - fbdev: sh_mobile_lcdc_fb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: rivafb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: radeonfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: omapfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: nvidiafb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: chipsfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: atyfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: aty128fb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - fbdev: atmel_lcdfb: Use backlight power constants (Jocelyn Falempe) [RHEL-75959]
  - video: fbdev: mmp: switch to use spi_alloc_host() (Jocelyn Falempe) [RHEL-75959]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-85526]
  - acct: perform last write from workqueue (CKI Backport Bot) [RHEL-83184] {CVE-2025-21846}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-91.el10]
changelog:
  - loop: Add sanity check for read/write_iter (Ming Lei) [RHEL-83595]
  - fs: add kern_path_locked_negative() (Ming Lei) [RHEL-83595]
  - tools headers: Sync uapi/linux/fcntl.h with the kernel sources (Ming Lei) [RHEL-83595]
  - perf probe: Pick the correct dwarf die while adding probe points (Ming Lei) [RHEL-83595]
  - devtmpfs: don't use vfs_getattr_nosec to query i_mode (Ming Lei) [RHEL-83595]
  - VFS: add common error checks to lookup_one_qstr_excl() (Ming Lei) [RHEL-83595]
  - VFS: change kern_path_locked() and user_path_locked_at() to never return negative dentry (Ming Lei) [RHEL-83595]
  - fs: move the bdex_statx call to vfs_getattr_nosec (Ming Lei) [RHEL-83595]
  - libfs: kill empty_dir_getattr() (Ming Lei) [RHEL-83595]
  - fs: Simplify getattr interface function checking AT_GETATTR_NOSEC flag (Ming Lei) [RHEL-83595]
  - fs/stat.c: switch to CLASS(fd_raw) (Ming Lei) [RHEL-83595]
  - kill getname_statx_lookup_flags() (Ming Lei) [RHEL-83595]
  - io_statx_prep(): use getname_uflags() (Ming Lei) [RHEL-83595]
  - getname_maybe_null() - the third variant of pathname copy-in (Ming Lei) [RHEL-83595]
  - teach filename_lookup() to treat NULL filename as "" (Ming Lei) [RHEL-83595]
  - dm table: Fix W=1 build warning when mempool_needs_integrity is unused (Ming Lei) [RHEL-83595]
  - block: move blkdev_{get,put} _no_open prototypes out of blkdev.h (Ming Lei) [RHEL-83595]
  - block: never reduce ra_pages in blk_apply_bdi_limits (Ming Lei) [RHEL-83595]
  - block: integrity: Do not call set_page_dirty_lock() (Ming Lei) [RHEL-83595]
  - loop: stop using vfs_iter_{read,write} for buffered I/O (Ming Lei) [RHEL-83595]
  - loop: LOOP_SET_FD: send uevents for partitions (Ming Lei) [RHEL-83595]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Ming Lei) [RHEL-83595]
  - loop: aio inherit the ioprio of original request (Ming Lei) [RHEL-83595]
  - block: fix resource leak in blk_register_queue() error path (Ming Lei) [RHEL-83595]
  - block: add SPDX header line to blk-throttle.h (Ming Lei) [RHEL-83595]
  - null_blk: Use strscpy() instead of strscpy_pad() in null_add_dev() (Ming Lei) [RHEL-83595]
  - block: add for_each_mp_bvec() (Ming Lei) [RHEL-83595]
  - block: don't grab elevator lock during queue initialization (Ming Lei) [RHEL-83595]
  - block: remove unused nseg parameter (Ming Lei) [RHEL-83595]
  - io_uring/rw: don't mask in f_iocb_flags (Ming Lei) [RHEL-83595]
  - docs: sysfs-block: Clarify integrity sysfs attributes (Ming Lei) [RHEL-83595]
  - block/blk-iocost: ensure 'ret' is set on error (Ming Lei) [RHEL-83595]
  - block: correct locking order for protecting blk-wbt parameters (Ming Lei) [RHEL-83595]
  - block: release q->elevator_lock in ioc_qos_write (Ming Lei) [RHEL-83595]
  - ublk: remove io_cmds list in ublk_queue (Ming Lei) [RHEL-83595]
  - blk-cgroup: improve policy registration error handling (Ming Lei) [RHEL-83595]
  - loop: move vfs_fsync() out of loop_update_dio() (Ming Lei) [RHEL-83595]
  - block: fix a comment in the queue_attrs[] array (Ming Lei) [RHEL-83595]
  - block: protect debugfs attribute method hctx_busy_show (Ming Lei) [RHEL-83595]
  - block: remove unnecessary goto labels in debugfs attribute read methods (Ming Lei) [RHEL-83595]
  - block: protect debugfs attrs using elevator_lock instead of sysfs_lock (Ming Lei) [RHEL-83595]
  - block: remove unused parameter 'q' parameter in __blk_rq_map_sg() (Ming Lei) [RHEL-83595]
  - block: fix adding folio to bio (Ming Lei) [RHEL-83595]
  - block: remove unused parameter (Ming Lei) [RHEL-83595]
  - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 (Ming Lei) [RHEL-83595]
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-83595]
  - block: protect hctx attributes/params using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect read_ahead_kb using q->limits_lock (Ming Lei) [RHEL-83595]
  - block: protect wbt_lat_usec using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: protect nr_requests update using q->elevator_lock (Ming Lei) [RHEL-83595]
  - block: introduce a dedicated lock for protecting queue elevator updates (Ming Lei) [RHEL-83595]
  - block: remove q->sysfs_lock for attributes which don't need it (Ming Lei) [RHEL-83595]
  - block: move q->sysfs_lock and queue-freeze under show/store method (Ming Lei) [RHEL-83595]
  - block: acquire q->limits_lock while reading sysfs attributes (Ming Lei) [RHEL-83595]
  - badblocks: use sector_t instead of int to avoid truncation of badblocks length (Ming Lei) [RHEL-83595]
  - badblocks: return boolean from badblocks_set() and badblocks_clear() (Ming Lei) [RHEL-83595]
  - badblocks: fix missing bad blocks on retry in _badblocks_check() (Ming Lei) [RHEL-83595]
  - badblocks: fix merge issue when new badblocks align with pre+1 (Ming Lei) [RHEL-83595]
  - badblocks: try can_merge_front before overlap_front (Ming Lei) [RHEL-83595]
  - badblocks: fix the using of MAX_BADBLOCKS (Ming Lei) [RHEL-83595]
  - badblocks: return error if any badblock set fails (Ming Lei) [RHEL-83595]
  - badblocks: return error directly when setting badblocks exceeds 512 (Ming Lei) [RHEL-83595]
  - badblocks: attempt to merge adjacent badblocks during ack_all_badblocks (Ming Lei) [RHEL-83595]
  - badblocks: factor out a helper try_adjacent_combine (Ming Lei) [RHEL-83595]
  - badblocks: Fix error shift ops (Ming Lei) [RHEL-83595]
  - block: Correctly initialize BLK_INTEGRITY_NOGENERATE and BLK_INTEGRITY_NOVERIFY (Ming Lei) [RHEL-83595]
  - block: ensure correct integrity capability propagation in stacked devices (Ming Lei) [RHEL-83595]
  - blk-throttle: carry over directly (Ming Lei) [RHEL-83595]
  - blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) [RHEL-83595]
  - blk-throttle: remove last_bytes_disp and last_ios_disp (Ming Lei) [RHEL-83595]
  - blk-throttle: fix lower bps rate by throtl_trim_slice() (Ming Lei) [RHEL-83595]
  - ublk: enforce ublks_max only for unprivileged devices (Ming Lei) [RHEL-83595]
  - loop: Remove struct loop_func_table (Ming Lei) [RHEL-83595]
  - ublk: add DMA alignment limit (Ming Lei) [RHEL-83595]
  - block: split struct bio_integrity_payload (Ming Lei) [RHEL-83595]
  - block: move the block layer auto-integrity code into a new file (Ming Lei) [RHEL-83595]
  - block: mark bounce buffering as incompatible with integrity (Ming Lei) [RHEL-83595]
  - null_blk: do partial IO for bad blocks (Ming Lei) [RHEL-83595]
  - null_blk: pass transfer size to null_handle_rq() (Ming Lei) [RHEL-83595]
  - null_blk: replace null_process_cmd() call in null_zone_write() (Ming Lei) [RHEL-83595]
  - null_blk: introduce badblocks_once parameter (Ming Lei) [RHEL-83595]
  - null_blk: generate null_blk configfs features string (Ming Lei) [RHEL-83595]
  - ublk: complete command synchronously on error (Ming Lei) [RHEL-83595]
  - blk-wbt: Cleanup a comment in wb_timer_fn (Ming Lei) [RHEL-83595]
  - blk-wbt: Fix some comments (Ming Lei) [RHEL-83595]
  - loop: take the file system minimum dio alignment into account (Ming Lei) [RHEL-83595]
  - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Ming Lei) [RHEL-83595]
  - loop: set LO_FLAGS_DIRECT_IO in loop_assign_backing_file (Ming Lei) [RHEL-83595]
  - loop: factor out a loop_assign_backing_file helper (Ming Lei) [RHEL-83595]
  - block: Remove commented out code (Ming Lei) [RHEL-83595]
  - Revert "driver: block: release the lo_work_lock before queue_work" (Ming Lei) [RHEL-83595]
  - block: refactor rq_qos_wait() (Ming Lei) [RHEL-83595]
  - block: introduce init_wait_func() (Ming Lei) [RHEL-83595]
  - loop: release the lo_work_lock before queue_work (Ming Lei) [RHEL-83595]
  - blk-crypto: add ioctls to create and prepare hardware-wrapped keys (Ming Lei) [RHEL-83595]
  - blk-crypto: show supported key types in sysfs (Ming Lei) [RHEL-83595]
  - blk-crypto: add basic hardware-wrapped key support (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Remove ufs_hba_variant_ops::program_key (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Convert to use UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Ming Lei) [RHEL-83595]
  - scsi: ufs: crypto: Add ufs_hba_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - scsi: ufs: qcom: Fix crypto key eviction (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: convert to use custom crypto profile (Ming Lei) [RHEL-83595]
  - mmc: crypto: add mmc_from_crypto_profile() (Ming Lei) [RHEL-83595]
  - mmc: sdhci-msm: fix crypto key eviction (Ming Lei) [RHEL-83595]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-83595]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-83595]
  - ublk: set_params: properly check if parameters can be applied (Ming Lei) [RHEL-83595]
  - block: make bio_integrity_map_user() static inline (Ming Lei) [RHEL-83595]
  - scsi: add support for user-meta interface (Ming Lei) [RHEL-83595]
  - nvme: add support for passing on the application tag (Ming Lei) [RHEL-83595]
  - block: add support to pass user meta buffer (Ming Lei) [RHEL-83595]
  - block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags (Ming Lei) [RHEL-83595]
  - io_uring: introduce attributes for read/write and PI support (Ming Lei) [RHEL-83595]
  - fs: introduce IOCB_HAS_METADATA for metadata (Ming Lei) [RHEL-83595]
  - fs, iov_iter: define meta io descriptor (Ming Lei) [RHEL-83595]
  - block: modify bio_integrity_map_user to accept iov_iter as argument (Ming Lei) [RHEL-83595]
  - block: copy back bounce buffer to user-space correctly in case of split (Ming Lei) [RHEL-83595]
  - block: define set of integrity flags to be inherited by cloned bip (Ming Lei) [RHEL-83595]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74336]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74336]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74336]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-82381]
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87947] {CVE-2025-21963}
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-87556]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93267] {CVE-2025-37943}
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Chunyu Hu) [RHEL-87654]
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-92996]
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92762]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92762]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92762]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92762]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92762]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-92762]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-92762]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92762]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92762]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86505]
  - redhat: configs: rhel: Enable CX231XX driver (Kate Hsuan) [RHEL-86822]
  - iomap: avoid avoid truncating 64-bit offset to 32 bits (Brian Foster) [RHEL-85399]
  - iomap: fix zero padding data issue in concurrent append writes (Brian Foster) [RHEL-85399]
  - iomap: pass byte granular end position to iomap_add_to_ioend (Brian Foster) [RHEL-85399]
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-85399]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-85399]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-85399]
  - iomap: warn on zero range of a post-eof folio (Brian Foster) [RHEL-85399]
  - iomap: drop an obsolete comment in iomap_dio_bio_iter (Brian Foster) [RHEL-85399]
  - iomap: add a merge boundary flag (Brian Foster) [RHEL-85399]
  - fs: iomap: Atomic write support (Brian Foster) [RHEL-85399]
  - fs: Export generic_atomic_write_valid() (Brian Foster) [RHEL-85399]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-92.el10]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93398]
  - perf python: Remove some unused macros (_PyUnicode_FromString(arg), etc) (Michael Petlan) [RHEL-77936]
  - redhat/kernel.spec: Remove /usr/share/perf-core from being installed (Michael Petlan) [RHEL-77936]
  - libapi: Add missing header with NAME_MAX define to io_dir.h (Michael Petlan) [RHEL-77936]
  - perf evsel: tp_format accessing improvements (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Michael Petlan) [RHEL-77936]
  - perf pmu: Handle memory failure in tool_pmu__new() (Michael Petlan) [RHEL-77936]
  - perf pmu: Dynamically allocate tool PMU (Michael Petlan) [RHEL-77936]
  - perf pmu: Switch to io_dir__readdir (Michael Petlan) [RHEL-77936]
  - tools lib api: Add io_dir an allocation free readdir alternative (Michael Petlan) [RHEL-77936]
  - perf pmu: Rename name matching for no suffix or wildcard variants (Michael Petlan) [RHEL-77936]
  - perf evsel: Reduce scanning core PMUs in is_hybrid (Michael Petlan) [RHEL-77936]
  - perf pmus: Restructure pmu_read_sysfs to scan fewer PMUs (Michael Petlan) [RHEL-77936]
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Michael Petlan) [RHEL-77936]
  - perf evsel: Add pmu_name helper (Michael Petlan) [RHEL-77936]
  - perf tests: Fix Tool PMU test segfault (Michael Petlan) [RHEL-77936]
  - perf tools: Add skip check in tool_pmu__event_to_str() (Michael Petlan) [RHEL-77936]
  - perf tools: Fix is_compat_mode build break in ppc64 (Michael Petlan) [RHEL-77936]
  - perf test: Fix Hwmon PMU test endianess issue (Michael Petlan) [RHEL-77936]
  - perf machine: Fixup kernel maps ends after adding extra maps (Michael Petlan) [RHEL-77936]
  - perf maps: Introduce map__set_kmap_maps() for kernel maps (Michael Petlan) [RHEL-77936]
  - perf x86/topdown: Fix topdown leader sampling test error on hybrid (Michael Petlan) [RHEL-77936]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-77936]
  - powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (Michael Petlan) [RHEL-77936] {CVE-2025-22094}
  - tools headers: Sync uapi/asm-generic/socket.h with the kernel sources (Michael Petlan) [RHEL-77936]
  - tools: Unify top-level quiet infrastructure (Michael Petlan) [RHEL-77936]
  - perf cpumap: Fix die and cluster IDs (Michael Petlan) [RHEL-77936]
  - perf test: Skip syscall enum test if no landlock syscall (Michael Petlan) [RHEL-77936]
  - perf trace: Fix runtime error of index out of bounds (Michael Petlan) [RHEL-77936]
  - perf trace: Fix BPF loading failure (-E2BIG) (Michael Petlan) [RHEL-77936]
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-77936]
  - perf bench: Fix undefined behavior in cmpworker() (Michael Petlan) [RHEL-77936]
  - perf annotate: Prefer passing evsel to evsel->core.idx (Michael Petlan) [RHEL-77936]
  - perf lock: Rename fields in lock_type_table (Michael Petlan) [RHEL-77936]
  - perf lock: Add percpu-rwsem for type filter (Michael Petlan) [RHEL-77936]
  - perf lock: Fix parse_lock_type which only retrieve one lock flag (Michael Petlan) [RHEL-77936]
  - perf lock: Fix return code for functions in __cmd_contention (Michael Petlan) [RHEL-77936]
  - perf hist: Fix width calculation in hpp__fmt() (Michael Petlan) [RHEL-77936]
  - perf hist: Fix bogus profiles when filters are enabled (Michael Petlan) [RHEL-77936]
  - perf hist: Deduplicate cmp/sort/collapse code (Michael Petlan) [RHEL-77936]
  - perf test: Improve verbose documentation (Michael Petlan) [RHEL-77936]
  - perf test: Add a runs-per-test flag (Michael Petlan) [RHEL-77936]
  - perf test: Send list output to stdout rather than stderr (Michael Petlan) [RHEL-77936]
  - perf test: Rename functions and variables for better clarity (Michael Petlan) [RHEL-77936]
  - perf tools: Expose quiet/verbose variables in Makefile.perf (Michael Petlan) [RHEL-77936]
  - perf config: Add a function to set one variable in .perfconfig (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Return correct value for skipping (Michael Petlan) [RHEL-77936]
  - perf test perftool_testsuite: Add missing description (Michael Petlan) [RHEL-77936]
  - perf inject: Fix use without initialization of local variables (Michael Petlan) [RHEL-77936]
  - perf probe: Rename err label (Michael Petlan) [RHEL-77936]
  - perf record: Fix segfault with --off-cpu when debuginfo is not enabled (Michael Petlan) [RHEL-77936]
  - perf tests base_probe: Fix check for the count of existing probes in test_adding_kernel (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add license files (Michael Petlan) [RHEL-77936]
  - perf test brstack: Speed up running test by using tr -s instead of xargs (Michael Petlan) [RHEL-77936]
  - perf tools mips: Fix mips syscall generation (Michael Petlan) [RHEL-77936]
  - perf tests arm_spe: Add test for discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Don't allocate buffer or tracking event in discard mode (Michael Petlan) [RHEL-77936]
  - perf tools arm-spe: Pull out functions for aux buffer and tracking setup (Michael Petlan) [RHEL-77936]
  - perf report: Fix misleading help message about --demangle (Michael Petlan) [RHEL-77936]
  - perf ftrace: Fix display for range of the first bucket (Michael Petlan) [RHEL-77936]
  - perf ftrace: Check min/max latency only with bucket range (Michael Petlan) [RHEL-77936]
  - perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf tarball (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event (Michael Petlan) [RHEL-77936]
  - perf symbol-elf: Avoid a weak cxx_demangle_sym function (Michael Petlan) [RHEL-77936]
  - perf trace: Fix unaligned access for augmented args (Michael Petlan) [RHEL-77936]
  - perf test: Mark remaining probe tests as exclusive (Michael Petlan) [RHEL-77936]
  - perf tools: Remove dependency on libaudit (Michael Petlan) [RHEL-77936]
  - perf tools s390: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools powerpc: Use generic syscall table scripts (Michael Petlan) [RHEL-77936]
  - perf tools mips: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools loongarch: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools arm64: Use syscall table (Michael Petlan) [RHEL-77936]
  - perf tools parisc: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools alpha: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools x86: Use generic syscall scripts (Michael Petlan) [RHEL-77936]
  - perf tools xtensa: Support syscall header (Michael Petlan) [RHEL-77936]
  - perf tools sparc: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools sh: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arm: Support syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools csky: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools arc: Support generic syscall headers (Michael Petlan) [RHEL-77936]
  - perf tools: Create generic syscall table support (Michael Petlan) [RHEL-77936]
  - perf test cpumap: Avoid use-after-free following merge (Michael Petlan) [RHEL-77936]
  - perf llvm-add2line: Remove unused symbol_conf.h include (Michael Petlan) [RHEL-77936]
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool (Michael Petlan) [RHEL-77936]
  - perf jitdump: Fixup in_pidns member when java agent and 'perf record' are not in the same pidns (Michael Petlan) [RHEL-77936]
  - perf namespaces: Introduce nsinfo__set_in_pidns() (Michael Petlan) [RHEL-77936]
  - perf jitdump: Accept jitdump mmaps emitted from inside containers (Michael Petlan) [RHEL-77936]
  - perf machine: Don't ignore _etext when not a text symbol (Michael Petlan) [RHEL-77936]
  - perf maps: Fix display of kernel symbols (Michael Petlan) [RHEL-77936]
  - perf test: Update ftrace test to use --graph-opts (Michael Petlan) [RHEL-77936]
  - perf ftrace profile: Add --graph-opts option (Michael Petlan) [RHEL-77936]
  - perf ftrace: Display latency statistics at the end (Michael Petlan) [RHEL-77936]
  - perf evsel: Improve the evsel__open_strerror() for EBUSY (Michael Petlan) [RHEL-77936]
  - perf tests shell task_analyzer: Run this test exclusively (Michael Petlan) [RHEL-77936]
  - perf tests code-reading: Handle change in objdump output from binutils >= 2.41 on riscv (Michael Petlan) [RHEL-77936]
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Michael Petlan) [RHEL-77936]
  - perf stat: Document and clarify outstate members (Michael Petlan) [RHEL-77936]
  - perf stat: Document and simplify interval timestamps (Michael Petlan) [RHEL-77936]
  - perf docs: Add documentation for --force-btf option (Michael Petlan) [RHEL-77936]
  - perf path: Remove unused is_executable_file() (Michael Petlan) [RHEL-77936]
  - perf values: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf stream: Use evsel rather than evsel->idx (Michael Petlan) [RHEL-77936]
  - perf jevents: Provide better path information for broken JSON (Michael Petlan) [RHEL-77936]
  - perf lock contention: Handle slab objects in -L/--lock-filter option (Michael Petlan) [RHEL-77936]
  - perf lock contention: Resolve slab object name using BPF (Michael Petlan) [RHEL-77936]
  - perf lock contention: Run BPF slab cache iterator (Michael Petlan) [RHEL-77936]
  - perf lock contention: Add and use LCB_F_TYPE_MASK (Michael Petlan) [RHEL-77936]
  - perf script: Cache the output type (Michael Petlan) [RHEL-77936]
  - perf python: Correctly throw IndexError (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evsel (Michael Petlan) [RHEL-77936]
  - perf python: Add __str__ and __repr__ functions to evlist (Michael Petlan) [RHEL-77936]
  - perf python: Add parse_events function (Michael Petlan) [RHEL-77936]
  - perf build: Remove test library from python shared object (Michael Petlan) [RHEL-77936]
  - perf kwork: Make perf_kwork_add_work a callback (Michael Petlan) [RHEL-77936]
  - perf bench: Remove reference to cmd_inject (Michael Petlan) [RHEL-77936]
  - perf lock: Move common lock contention code to new file (Michael Petlan) [RHEL-77936]
  - perf env: Move arch errno function to only use in env (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Remove stale build comment (Michael Petlan) [RHEL-77936]
  - perf x86: Define arch_fetch_insn in NO_AUXTRACE builds (Michael Petlan) [RHEL-77936]
  - perf script: Move perf_sample__sprintf_flags to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_fetch_insn to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf script: Move script_spec code to trace-event-scripting.c (Michael Petlan) [RHEL-77936]
  - perf stat: Move stat_config into config.c (Michael Petlan) [RHEL-77936]
  - perf script: Move find_scripts to browser/scripts.c (Michael Petlan) [RHEL-77936]
  - perf script: Use openat for directory iteration (Michael Petlan) [RHEL-77936]
  - perf kvm: Move functions used in util out of builtin (Michael Petlan) [RHEL-77936]
  - perf script: Move scripting_max_stack out of builtin (Michael Petlan) [RHEL-77936]
  - perf python: Remove unused #include (Michael Petlan) [RHEL-77936]
  - perf python: Constify variables and parameters (Michael Petlan) [RHEL-77936]
  - perf python: Remove python 2 scripting support (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add a test for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Add documentation for pause / resume (Michael Petlan) [RHEL-77936]
  - perf intel-pt: Improve man page format (Michael Petlan) [RHEL-77936]
  - perf tools: Add missing_features for aux_start_paused, aux_pause, aux_resume (Michael Petlan) [RHEL-77936]
  - perf tools: Parse aux-action (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux-action config term (Michael Petlan) [RHEL-77936]
  - perf tools: Add aux_start_paused, aux_pause and aux_resume (Michael Petlan) [RHEL-77936]
  - perf build: Minor improvement for linking libzstd (Michael Petlan) [RHEL-77936]
  - tools build: Add feature test for libelf with ZSTD (Michael Petlan) [RHEL-77936]
  - perf tools tests shell base_probe: Enhance print_overall_results to print summary information (Michael Petlan) [RHEL-77936]
  - perf tools arch powerpc: Add register mask for power11 PVR in extended regs (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Fix compiler error for clang 12 (Michael Petlan) [RHEL-77936]
  - tools build: Test for presence of libtraceevent and libtracefs in test-all.c (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libslang-include-subdir=1 if test-all.c builds (Michael Petlan) [RHEL-77936]
  - perf tests switch-tracking: Set this test to run exclusively (Michael Petlan) [RHEL-77936]
  - perf test: Introduce DEFINE_SUITE_EXCLUSIVE() (Michael Petlan) [RHEL-77936]
  - perf expr: Initialize is_test value in expr__ctx_new() (Michael Petlan) [RHEL-77936]
  - perf tests: Fix an incorrect type in append_script() (Michael Petlan) [RHEL-77936]
  - perf test: Remove duplicate word (Michael Petlan) [RHEL-77936]
  - perf string: Avoid undefined NULL+1 (Michael Petlan) [RHEL-77936]
  - perf vendor events arm64: Update N2/V2 events from source (Michael Petlan) [RHEL-77936]
  - perf tools: Avoid unaligned pointer operations (Michael Petlan) [RHEL-77936]
  - tools build feature: Don't set feature-libcap=1 if libcap-devel isn't available (Michael Petlan) [RHEL-77936]
  - tools build feature: Add some comments to explain the FEATURE_TESTS logic (Michael Petlan) [RHEL-77936]
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Michael Petlan) [RHEL-77936]
  - perf header: Fix one memory leakage in process_bpf_btf() (Michael Petlan) [RHEL-77936]
  - perf jevents: Fix build issue in '*/' in event descriptions (Michael Petlan) [RHEL-77936]
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Michael Petlan) [RHEL-77936]
  - perf probe: Replace unacceptable characters when generating event name (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Add --max-latency option (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --min-latency to narrow down into a latency range (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Introduce --bucket-range to ask for linear bucketing (Michael Petlan) [RHEL-77936]
  - perf ftrace latency: Pass ftrace pointer to histogram routines to pass more args (Michael Petlan) [RHEL-77936]
  - perf tests: Enable tests disabled due to tracepoint parsing (Michael Petlan) [RHEL-77936]
  - perf evsel: Allow evsel__newtp without libtraceevent (Michael Petlan) [RHEL-77936]
  - perf evsel: Add/use accessor for tp_format (Michael Petlan) [RHEL-77936]
  - perf trace-event: Always build trace-event-info.c (Michael Petlan) [RHEL-77936]
  - perf trace-event: Constify print arguments (Michael Petlan) [RHEL-77936]
  - tool api fs: Correctly encode errno for read/write open failures (Michael Petlan) [RHEL-77936]
  - perf env: Ensure failure broken topology file reads are always -1 encoded (Michael Petlan) [RHEL-77936]
  - perf btf: Make the sigtrap test helper to find a member by name widely available (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Add support for SPE Data Source packet on AmpereOne (Michael Petlan) [RHEL-77936]
  - perf arm-spe: Prepare for adding data source packet implementations for other cores (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add checking for reference counter (Michael Petlan) [RHEL-77936]
  - perf cpumap: Add more tests for CPU map merging (Michael Petlan) [RHEL-77936]
  - libperf cpumap: Refactor perf_cpu_map__merge() (Michael Petlan) [RHEL-77936]
  - perf config: Fix trival typo 'an' -> 'can' (Michael Petlan) [RHEL-77936]
  - perf script python: Improve physical mem type resolution (Michael Petlan) [RHEL-77936]
  - perf disasm: Return a proper error when not determining the file type (Michael Petlan) [RHEL-77936]
  - tools: Sync if_xdp.h uapi tooling header (Michael Petlan) [RHEL-77936]
  - perf docs: arm_spe: Document new discard mode (Michael Petlan) [RHEL-77936]
  - perf: arm_spe: Add format option for discard mode (Michael Petlan) [RHEL-77936]
  - perf: Switch back to struct platform_driver::remove() (Michael Petlan) [RHEL-77936]
  - perf/amd/ibs: Prevent leaking sensitive data to userspace (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix error handling in init_rapl_pmus() (Michael Petlan) [RHEL-77936]
  - perf/x86: Check data address for IBS software filter (Michael Petlan) [RHEL-77936]
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Michael Petlan) [RHEL-77936]
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Use better start period for frequency mode (Michael Petlan) [RHEL-77936]
  - perf/core: Fix low freq setting via IOC_PERIOD (Michael Petlan) [RHEL-77936]
  - perf/x86: Fix low freqency setting issue (Michael Petlan) [RHEL-77936]
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (Michael Petlan) [RHEL-77936] {CVE-2025-21895}
  - perf/core: Add RCU read lock protection to perf_iterate_ctx() (Michael Petlan) [RHEL-77936] {CVE-2025-21889}
  - perf/x86/intel: Fix event constraints for LNC (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Clean up PEBS-via-PT on hybrid (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Fix the error checking order (Michael Petlan) [RHEL-77936]
  - perf: map pages in advance (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Support more units on Granite Rapids (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/uncore: Clean up func_id (Michael Petlan) [RHEL-77936]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-77936]
  - perf/x86: Relax privilege filter restriction on AMD IBS (Michael Petlan) [RHEL-77936]
  - perf/core: Export perf_exclude_event() (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add core energy counter support for AMD CPUs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Move the cntr_mask to rapl_pmus struct (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the global variable rapl_msrs (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Modify the generic variable names to *_pkg* (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Add arguments to the init and cleanup functions (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Make rapl_model struct global (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Rename rapl_pmu variables (Michael Petlan) [RHEL-77936]
  - perf/x86/rapl: Remove the cpu_to_rapl_pmu() function (Michael Petlan) [RHEL-77936]
  - x86/topology: Introduce topology_logical_core_id() (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Factor out functions for PEBS records processing (Michael Petlan) [RHEL-77936]
  - perf/x86/intel/ds: Clarify adaptive PEBS processing (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_brstack (Michael Petlan) [RHEL-77936]
  - perf/core: Check sample_type in perf_sample_save_callchain (Michael Petlan) [RHEL-77936]
  - perf/core: Save raw sample data conditionally based on sample type (Michael Petlan) [RHEL-77936]
  - x86/cpu: Replace PEBS use of 'x86_cpu_desc' use with 'x86_cpu_id' (Michael Petlan) [RHEL-77936]
  - x86/cpu: Expose only stepping min/max interface (Michael Petlan) [RHEL-77936]
  - x86/cpu: Introduce new microcode matching helper (Michael Petlan) [RHEL-77936]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Michael Petlan) [RHEL-77936]
  - redhat/spec: fix selftests dependencies (Gregory Bell) [RHEL-88228]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-93.el10]
changelog:
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (José Expósito) [RHEL-85955]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (José Expósito) [RHEL-85955]
  - jiffies: Define secs_to_jiffies() (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (José Expósito) [RHEL-85955]
  - ASoC: hdmi-codec: pass data to get_dai_id too (José Expósito) [RHEL-85955]
  - kthread: modify kernel-doc function name to match code (José Expósito) [RHEL-85955]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU exp kworkers (José Expósito) [RHEL-85955]
  - treewide: Introduce kthread_run_worker[_on_cpu]() (José Expósito) [RHEL-85955]
  - kthread: Unify kthread_create_on_cpu() and kthread_create_worker_on_cpu() automatic format (José Expósito) [RHEL-85955]
  - rcu: Use kthread preferred affinity for RCU boost (José Expósito) [RHEL-85955]
  - kthread: Implement preferred affinity (José Expósito) [RHEL-85955]
  - mm: Create/affine kswapd to its preferred node (José Expósito) [RHEL-85955]
  - mm: Create/affine kcompactd to its preferred node (José Expósito) [RHEL-85955]
  - kthread: Default affine kthread to its preferred NUMA node (José Expósito) [RHEL-85955]
  - kthread: Make sure kthread hasn't started while binding it (José Expósito) [RHEL-85955]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (José Expósito) [RHEL-85955]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (José Expósito) [RHEL-85955]
  - lib: test_objpool: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - kallsyms: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - soc/qman: test: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: qedi: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2i: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (José Expósito) [RHEL-85955]
  - firmware: stratix10-svc: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - arm/bL_switcher: Use kthread_run_on_cpu() (José Expósito) [RHEL-85955]
  - cgroup/dmem: Don't open-code css_for_each_descendant_pre (José Expósito) [RHEL-85955]
  - cgroup/rdma: Drop bogus PAGE_COUNTER select (José Expósito) [RHEL-85955]
  - doc/cgroup: Fix title underline length (José Expósito) [RHEL-85955]
  - drm/doc: Include new drm-compute documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Fix parameters documentation (José Expósito) [RHEL-85955]
  - cgroup/dmem: Select PAGE_COUNTER (José Expósito) [RHEL-85955]
  - kernel/cgroup: Add "dmem" memory accounting cgroup (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.14 backport (José Expósito) [RHEL-85955]
  - media: uapi: Add MEDIA_BUS_FMT_RGB101010_1X7X5_{SPWG, JEIDA} (José Expósito) [RHEL-85955]
  - fbdev: Fix recursive dependencies wrt BACKLIGHT_CLASS_DEVICE (José Expósito) [RHEL-85955]
  - drm/xe: remove unused xe_pciids.h harder, add missing PCI ID (José Expósito) [RHEL-85955]
  - drm/xe: switch to common PCI ID macros (José Expósito) [RHEL-85955]
  - drm/xe/ptl: Add PTL platform definition (José Expósito) [RHEL-85955]
  - drm/intel/pciids: rename i915_pciids.h to just pciids.h (José Expósito) [RHEL-85955]
  - drm/i915/pciids: add PVC PCI ID macros (José Expósito) [RHEL-85955]
  - drm/i915/xe3lpd: reuse xe2lpd definition (José Expósito) [RHEL-85955]
  - drm/i915/pciids: separate ARL and MTL PCI IDs (José Expósito) [RHEL-85955]
  - drm/i915/pciids: use designated initializers in INTEL_VGA_DEVICE() (José Expósito) [RHEL-85955]
  - fs: port files to file_ref (José Expósito) [RHEL-85955]
  - fs: add file_ref (José Expósito) [RHEL-85955]
  - fs: protect backing files with rcu (José Expósito) [RHEL-85955]
  - redhat/configs: Add new configs from drm 6.13 backport (José Expósito) [RHEL-85955]
  - vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92474]
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88152]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88152]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88152]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88152]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88152]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88152]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88152]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88152]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88152]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88152]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88152]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88152]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-85400]
  - jbd2: flush filesystem device before updating tail sequence (Brian Foster) [RHEL-85400]
  - jbd2: increase IO priority for writing revoke records (Brian Foster) [RHEL-85400]
  - jbd2: Fix comment describing journal_init_common() (Brian Foster) [RHEL-85400]
  - ext4: prevent an infinite loop in the lazyinit thread (Brian Foster) [RHEL-85400]
  - ext4: use struct_size() to improve ext4_htree_store_dirent() (Brian Foster) [RHEL-85400]
  - ext4: annotate struct fname with __counted_by() (Brian Foster) [RHEL-85400]
  - ext4: use str_yes_no() helper function (Brian Foster) [RHEL-85400]
  - ext4: prevent delalloc to nodelalloc on remount (Brian Foster) [RHEL-85400]
  - jbd2: make b_frozen_data allocation always succeed (Brian Foster) [RHEL-85400]
  - ext4: cleanup variable name in ext4_fc_del() (Brian Foster) [RHEL-85400]
  - ext4: use string choices helpers (Brian Foster) [RHEL-85400]
  - jbd2: remove the 'success' parameter from the jbd2_do_replay() function (Brian Foster) [RHEL-85400]
  - jbd2: remove useless 'block_error' variable (Brian Foster) [RHEL-85400]
  - jbd2: factor out jbd2_do_replay() (Brian Foster) [RHEL-85400]
  - jbd2: refactor JBD2_COMMIT_BLOCK process in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: unified release of buffer_head in do_one_pass() (Brian Foster) [RHEL-85400]
  - jbd2: remove redundant judgments for check v1 checksum (Brian Foster) [RHEL-85400]
  - ext4: use ERR_CAST to return an error-valued pointer (Brian Foster) [RHEL-85400]
  - ext4: partial zero eof block on unaligned inode size extension (Brian Foster) [RHEL-85400]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Brian Foster) [RHEL-85400]
  - ext4: pass write-hint for buffered IO (Brian Foster) [RHEL-85400]
  - ext4: fix race in buffer_head read fault injection (Brian Foster) [RHEL-85400]
  - ext4: don't pass full mapping flags to ext4_es_insert_extent() (Brian Foster) [RHEL-85400]
  - ext4: mark ctx_*_flags() with __maybe_unused (Brian Foster) [RHEL-85400]
  - ext4: return error on syncfs after shutdown (Brian Foster) [RHEL-85400]
  - fs: ext4: Don't use CMA for buffer_head (Brian Foster) [RHEL-85400]
  - ext4: simplify if condition (Brian Foster) [RHEL-85400]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-85400]
  - ext4: WARN if a full dir leaf block has only one dentry (Brian Foster) [RHEL-85400]
  - ext4: show the default enabled prefetch_block_bitmaps option (Brian Foster) [RHEL-85400]
  - ext4: Do not fallback to buffered-io for DIO atomic write (Brian Foster) [RHEL-85400]
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Brian Foster) [RHEL-85400]
  - ext4: Check for atomic writes support in write iter (Brian Foster) [RHEL-85400]
  - ext4: Add statx support for atomic writes (Brian Foster) [RHEL-85400]
  - ext4: avoid remount errors with 'abort' mount option (Brian Foster) [RHEL-85400]
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Brian Foster) [RHEL-85400]
  - ext4: Call ext4_journal_stop(handle) only once in ext4_dio_write_iter() (Brian Foster) [RHEL-85400]
  - module: Convert symbol namespace to string literal (Eder Zulian) [RHEL-78707]
  - iommu/vt-d: Fix possible circular locking dependency (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix header file (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Fix suspicious RCU usage (Eder Zulian) [RHEL-78701] {CVE-2025-21876}
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Eder Zulian) [RHEL-78701]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Eder Zulian) [RHEL-78701]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Eder Zulian) [RHEL-78701] {CVE-2024-57999}
  - scatterlist: fix a typo (Eder Zulian) [RHEL-78701]
  - docs/core-api: swiotlb: fix typos (Eder Zulian) [RHEL-78701]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Eder Zulian) [RHEL-78702]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Eder Zulian) [RHEL-78701]
  - iommu: Fix a spelling error (Eder Zulian) [RHEL-78701]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Eder Zulian) [RHEL-78701]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Eder Zulian) [RHEL-78701] {CVE-2025-21770}
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Eder Zulian) [RHEL-78701]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Eder Zulian) [RHEL-78707]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Eder Zulian) [RHEL-78707]
  - iommufd/selftest: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78707]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove dev == NULL checks (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Eder Zulian) [RHEL-78701]
  - iommu/amd: remove return value of amd_iommu_detect (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function get_dte256() (Eder Zulian) [RHEL-75907]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Eder Zulian) [RHEL-75907]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Eder Zulian) [RHEL-75907]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Eder Zulian) [RHEL-75907]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Eder Zulian) [RHEL-75907]
  - iommu/vt-d: Link cache tags of same iommu unit together (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove iommu cap audit (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Eder Zulian) [RHEL-78701] {CVE-2025-21833}
  - iommu: Use str_enable_disable-like helpers (Eder Zulian) [RHEL-78701]
  - iommu: Remove the remove_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/amd: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Eder Zulian) [RHEL-78701]
  - iommu: Detaching pasid by attaching to the blocked_domain (Eder Zulian) [RHEL-78701]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Eder Zulian) [RHEL-78701]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Add support for PRR bit setup (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Eder Zulian) [RHEL-78702]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Eder Zulian) [RHEL-78702]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Eder Zulian) [RHEL-78702]
  - iommu: Manage driver probe deferral better (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Retire probe deferral workaround (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu: Make instance lookup robust (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Log better event records (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Eder Zulian) [RHEL-78702]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Eder Zulian) [RHEL-78702]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Eder Zulian) [RHEL-78702]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Eder Zulian) [RHEL-78707]
  - iommufd: Fix typos in kernel-doc comments (Eder Zulian) [RHEL-78707]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Add ops->domain_alloc_nested() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Improve amd_iommu_release_device() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add ops->release_domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reorder attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Eder Zulian) [RHEL-78701]
  - iommu/amd: Rearrange attach device code (Eder Zulian) [RHEL-78701]
  - iommu/amd: Reduce domain lock scope in attach device path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not detach devices in domain free path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove unused amd_iommus variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: xarray to track protection_domain->iommu list (Eder Zulian) [RHEL-78701]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use ida interface to manage protection domain ID (Eder Zulian) [RHEL-78701]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Eder Zulian) [RHEL-78701]
  - iommu/amd: Do not try copy old DTE resume path (Eder Zulian) [RHEL-78701]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Eder Zulian) [RHEL-78701]
  - iommu: Make set_dev_pasid op support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add iommu_domain_did() to get did (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add pasid replace helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor the pasid setup helpers (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Eder Zulian) [RHEL-78701]
  - iommu: Pass old domain to set_dev_pasid op (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Eder Zulian) [RHEL-78701]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Separate page request queue from SVM (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused dmar_msi_read (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Increase buffer size for device name (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Use PCI_DEVID() macro (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Refactor first_level_by_default() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Remove unused domain_alloc callback (Eder Zulian) [RHEL-78701]
  - iommu/vt-d: Add domain_alloc_paging support (Eder Zulian) [RHEL-78701]
  - iommu/iova: Fix typo 'adderss' (Eder Zulian) [RHEL-78701]
  - iommu: Restore iommu_flush_iotlb_all() (Eder Zulian) [RHEL-78701]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Create __iommu_alloc_identity_domain() (Eder Zulian) [RHEL-78701]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Implement global identity domain (Eder Zulian) [RHEL-78701]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Separate page table setup from domain allocation (Eder Zulian) [RHEL-78701]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Eder Zulian) [RHEL-78701]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Add new flag to explictly request PASID capable domain (Eder Zulian) [RHEL-78701]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Eder Zulian) [RHEL-78701]
  - iommu: Refactor __iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_domain_alloc() (Eder Zulian) [RHEL-78701]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - media: nvidia: tegra: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - remoteproc: Use iommu_paging_domain_alloc() (Eder Zulian) [RHEL-78701]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Eder Zulian) [RHEL-78701]
  - iommu/sysfs: constify the class struct (Eder Zulian) [RHEL-78701]
  - iommu: Remove iommu_present() (Eder Zulian) [RHEL-78701]
  - iommu: Reorganize kerneldoc parameter names (Eder Zulian) [RHEL-78701]
  - iommu: Make bus_iommu_probe() static (Eder Zulian) [RHEL-78701]
  - iommu: Add a kdoc to iommu_unmap() (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Eder Zulian) [RHEL-78701]
  - dt-bindings: arm-smmu: document QCS615 APPS SMMU (Eder Zulian) [RHEL-78701]
  - dt-bindings: iommu: arm,smmu: Add Qualcomm SAR2130P compatible (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Eder Zulian) [RHEL-78701]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Eder Zulian) [RHEL-78701]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Eder Zulian) [RHEL-78707]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Eder Zulian) [RHEL-78707]
  - iommufd: Lock all IOAS objects (Eder Zulian) [RHEL-78707]
  - iommufd: Export do_update_pinned (Eder Zulian) [RHEL-78707]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Eder Zulian) [RHEL-73584]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Eder Zulian) [RHEL-73584]
  - ACPI/IORT: Support CANWBS memory access flag (Eder Zulian) [RHEL-73584]
  - ACPICA: IORT: Update for revision E.f (Eder Zulian) [RHEL-73584]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Eder Zulian) [RHEL-73584]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Eder Zulian) [RHEL-73591]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Eder Zulian) [RHEL-73591]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Eder Zulian) [RHEL-73591]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Eder Zulian) [RHEL-73591]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Eder Zulian) [RHEL-73591]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Eder Zulian) [RHEL-73591]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add refcount to mock_iommu_device (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Eder Zulian) [RHEL-73589]
  - iommufd/selftest: Add container_of helpers (Eder Zulian) [RHEL-73589]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Eder Zulian) [RHEL-73589]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Eder Zulian) [RHEL-73589]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Eder Zulian) [RHEL-73589]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Eder Zulian) [RHEL-73589]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Eder Zulian) [RHEL-73589]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Eder Zulian) [RHEL-73589]
  - iommufd: Move struct iommufd_object to public iommufd header (Eder Zulian) [RHEL-73589]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Eder Zulian) [RHEL-78707]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: File mappings for mdev (Eder Zulian) [RHEL-78707]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader for file mappings (Eder Zulian) [RHEL-78707]
  - iommufd: Folio subroutines (Eder Zulian) [RHEL-78707]
  - iommufd: pfn_reader local variables (Eder Zulian) [RHEL-78707]
  - iommufd: Generalize iopt_pages address (Eder Zulian) [RHEL-78707]
  - iommufd: Rename uptr in iopt_alloc_iova() (Eder Zulian) [RHEL-78707]
  - mm/gup: Add folio_add_pins() (Eder Zulian) [RHEL-78701]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Eder Zulian) [RHEL-78701]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Eder Zulian) [RHEL-78701]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace more error paths (Eder Zulian) [RHEL-78701]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Eder Zulian) [RHEL-78701]
  - dma-mapping: trace dma_alloc/free direction (Eder Zulian) [RHEL-78701]
  - dma-mapping: use macros to define events in a class (Eder Zulian) [RHEL-78701]
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Eder Zulian) [RHEL-78701]
  - dma-debug: remove DMA_API_DEBUG_SG (Eder Zulian) [RHEL-78701]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Eder Zulian) [RHEL-78701]
  - dma-debug: fix a possible deadlock on radix_lock (Eder Zulian) [RHEL-78701] {CVE-2024-47143}
  - selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83555]
  - xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83555]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) (Jaroslav Kysela) [RHEL-93495]
  - firmware: cs_dsp: Fix OOB memory read access in KUnit test (Jaroslav Kysela) [RHEL-93495]
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through debug printing (Thomas Huth) [RHEL-85180]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Notify userspace that guest's AP config changed when mdev removed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Signal eventfd when guest AP configuration is changed (Thomas Huth) [RHEL-85180]
  - s390/vfio-ccw: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Fix indentation in vfio_ap_mdev_ioctl() (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using "struct page" for vsie page (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop messing with page refcount (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: stop using page->index (Thomas Huth) [RHEL-85180]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85180]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85180]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85180]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (Thomas Huth) [RHEL-85180]
  - s390/vfio-ap: Switch over to sysfs_emit() (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgste_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Convert pgprot_val() into function (Thomas Huth) [RHEL-85180]
  - s390/mm: Use pgprot_val() instead of open coding (Thomas Huth) [RHEL-85180]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-94.el10]
changelog:
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72644]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72644]
  - net: qed: fix typos (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_error_handlers (John Meneghini) [RHEL-72644]
  - scsi: qedf: Constify 'struct bin_attribute' (John Meneghini) [RHEL-72644]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72644]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72644]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72644]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72644]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72644]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72644]
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu) [RHEL-78772]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87766]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87766]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87766]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-16.alma.1
changelog:
  - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm-
    logo.png to watermark.png in the spinner theme directory to ensure the
    AlmaLinux watermark is displayed in plymouth.


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-43412]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-43412]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-43412]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-43412]
  - kvm-pc-q35-Bump-max_cpus-to-4096-vcpus.patch [RHEL-57668]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73005]
  - kvm-virtio-net-disable-USO-for-all-RHEL9.patch [RHEL-69500]
  - Resolves: RHEL-43412
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-10.0-beta])
  - Resolves: RHEL-57668
    ([RFE] [HPEMC] [RHEL-10.0] qemu-kvm: support up to 4096 VCPUs)
  - Resolves: RHEL-73005
    (qemu-kvm: vhost: reports error while updating IOTLB entries)
  - Resolves: RHEL-69500
    ([Stable_Guest_ABI][USO][9.6.0-machine-type]From 10.0 to RHEL.9.6.0 the guest with 9.6 machine type only, the guest crashed with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-11
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-73002]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73835]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-74361]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-74461]
  - Resolves: RHEL-73002
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9 [rhel-10])
  - Resolves: RHEL-73835
    (VM crashes when requesting domstats [rhel-10])
  - Resolves: RHEL-74361
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))
  - Resolves: RHEL-74461
    (fsfreeze hooks doesn't log error on system logs when running hook fails [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-12
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65618]
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72717]
  - kvm-arm-disable-pauth-for-virt-rhel9-in-RHEL10.patch [RHEL-71761]
  - Resolves: RHEL-65618
    ([RHEL10] Failed to hot add PCIe device behind xio3130 downstream)
  - Resolves: RHEL-72717
    (Boot fall back to cdrom from network not always working)
  - Resolves: RHEL-71761
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-13
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-76908]
  - Resolves: RHEL-76908
    (Ensure qemu as NBD server does not flood logs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-14
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73894]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78370]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78370]
  - Resolves: RHEL-73894
    (No RARP packets on the destination after migration [rhel-10])
  - Resolves: RHEL-78370
    (Add vhost-user internal migration for passt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15
changelog:
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54670]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54670]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54670]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54670]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54670]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54670]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54670]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54670]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54670]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54670]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54670]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54670]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54670]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54670]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54670]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54670]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54670]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54670]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54670]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54670]
  - Resolves: RHEL-54670
    (Provide QMP command for block device reactivation after migration [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-16
changelog:
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69776]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-83535]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-69776
    ([rhel10]Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-17
changelog:
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.0.0-1.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le
  - Apply patch to fix duplicate label in docs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-2
changelog:
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-87642]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-87642]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-87642]
  - kvm-Enable-vhost-user-gpu-pci-for-RHIVOS.patch [RHEL-86056]
  - Resolves: RHEL-87642
    (QEMU sends unaligned discards on 4K devices[RHEL-10])
  - Resolves: RHEL-86056
    (Enable 'vhost-user-gpu-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-3
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85635]
  - kvm-meson-configure-add-valgrind-option-en-dis-able-valg.patch [RHEL-88457]
  - kvm-distro-add-an-explicit-valgrind-devel-build-dep.patch [RHEL-88457]
  - kvm-Allow-guest-get-load-QGA-command.patch [RHEL-91219]
  - Resolves: RHEL-85635
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-88457
    (qemu inadvertantly built with valgrind coroutine stack debugging on x86_64)
  - Resolves: RHEL-91219
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-4
changelog:
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-88435 RHEL-88437]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Minor-refactoring.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-88435 RHEL-88437]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-88435 RHEL-88437]
  - Resolves: RHEL-88435
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-10.1])
  - Resolves: RHEL-88437
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.0.0-10.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-8
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540]
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212]
  - Resolves: RHEL-129540
    (Assertion failure on drain with iothread and I/O load)
  - Resolves: RHEL-121543
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device)
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-9
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212]
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003]
  - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853]
  - Resolves: RHEL-134212
    ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2)
  - Resolves: RHEL-110003
    (Expose block limits of block nodes in QMP and qemu-img)
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-10
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142]
  - Resolves: RHEL-108142
    (QEMU crashes when stopping source VM during live migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-11
changelog:
  - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-126707]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853]
  - Resolves: RHEL-126707
    ([qemu, rhel-10] increase default TSEG size)
  - Resolves: RHEL-139028
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2])
  - Resolves: RHEL-111853
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-4.el10
changelog:
  - kvm-accel-kvm-check-for-KVM_CAP_READONLY_MEM-on-VM.patch [RHEL-58928]
  - kvm-hw-s390x-ipl-Provide-more-memory-to-the-s390-ccw.img.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Use-the-libc-from-SLOF-and-remove-s.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Link-the-netboot-code-into-the-main.patch [RHEL-58153]
  - kvm-redhat-Remove-the-s390-netboot.img-from-the-spec-fil.patch [RHEL-58153]
  - kvm-hw-s390x-Remove-the-possibility-to-load-the-s390-net.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Merge-netboot.mak-into-the-main-Mak.patch [RHEL-58153]
  - kvm-docs-system-s390x-bootdevices-Update-the-documentati.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-ISO-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-ECKD-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-SCSI-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-DASD-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-Netboot-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Enable-failed-IPL-to-return-after-e.patch [RHEL-58153]
  - kvm-include-hw-s390x-Add-include-files-for-common-IPL-st.patch [RHEL-58153]
  - kvm-s390x-Add-individual-loadparm-assignment-to-CCW-devi.patch [RHEL-58153]
  - kvm-hw-s390x-Build-an-IPLB-for-each-boot-device.patch [RHEL-58153]
  - kvm-s390x-Rebuild-IPLB-for-SCSI-device-directly-from-DIA.patch [RHEL-58153]
  - kvm-pc-bios-s390x-Enable-multi-device-boot-loop.patch [RHEL-58153]
  - kvm-docs-system-Update-documentation-for-s390x-IPL.patch [RHEL-58153]
  - kvm-tests-qtest-Add-s390x-boot-order-tests-to-cdrom-test.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Clarify-alignment-is-in-bytes.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Don-t-generate-TEXTRELs.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Introduce-EXTRA_LDFLAGS.patch [RHEL-58153]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-50529]
  - kvm-vfio-migration-Report-only-stop-copy-size-in-vfio_st.patch [RHEL-64308]
  - kvm-vfio-migration-Change-trace-formats-from-hex-to-deci.patch [RHEL-64308]
  - kvm-kvm-Allow-kvm_arch_get-put_registers-to-accept-Error.patch [RHEL-20574]
  - kvm-target-i386-kvm-Report-which-action-failed-in-kvm_ar.patch [RHEL-20574]
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30315 RHEL-45110]
  - Resolves: RHEL-58928
    (Boot SNP guests failed with qemu-kvm: kvm_set_user_memory_region)
  - Resolves: RHEL-58153
    ([IBM 10.0 FEAT] KVM: Full boot order support - qemu part)
  - Resolves: RHEL-50529
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer)
  - Resolves: RHEL-64308
    (High threshold value observed in vGPU live migration)
  - Resolves: RHEL-20574
    (Fail migration properly when put cpu register fails)
  - Resolves: RHEL-30315
    ([Intel 10.0 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45110
    ([Intel 10.0 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-5
changelog:
  - kvm-migration-Ensure-vmstate_save-sets-errp.patch [RHEL-63051]
  - kvm-kvm-replace-fprintf-with-error_report-printf-in-kvm_.patch [RHEL-57685]
  - kvm-kvm-refactor-core-virtual-machine-creation-into-its-.patch [RHEL-57685]
  - kvm-accel-kvm-refactor-dirty-ring-setup.patch [RHEL-57685]
  - kvm-KVM-Dynamic-sized-kvm-memslots-array.patch [RHEL-57685]
  - kvm-KVM-Define-KVM_MEMSLOTS_NUM_MAX_DEFAULT.patch [RHEL-57685]
  - kvm-KVM-Rename-KVMMemoryListener.nr_used_slots-to-nr_slo.patch [RHEL-57685]
  - kvm-KVM-Rename-KVMState-nr_slots-to-nr_slots_max.patch [RHEL-57685]
  - kvm-Require-new-dtrace-package.patch [RHEL-67899]
  - Resolves: RHEL-63051
    (qemu crashed after killed virtiofsd during migration)
  - Resolves: RHEL-57685
    (Bad migration performance when performing vGPU VM live migration )
  - Resolves: RHEL-67899
    (Failed to build qemu-kvm due to missing dtrace [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-vfio-container-Fix-container-object-destruction.patch [RHEL-67936]
  - kvm-virtio-net-disable-USO-for-RHEL9.patch [RHEL-40950]
  - kvm-qemu-guest-agent-add-new-api-to-allow-rpc.patch [RHEL-60223]
  - Resolves: RHEL-67936
    (QEMU should fail gracefully with passthrough devices in SEV-SNP guests)
  - Resolves: RHEL-40950
    ([Stable_Guest_ABI][USO]From 10-beta to RHEL.9.5.0  the guest with 9.4 machine type only, the guest crashed  with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7 )
  - Resolves: RHEL-60223
    ([qemu-guest-agent] Add new api 'guest-network-get-route' to allow-rpc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-58316]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68444]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68444]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68444]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68444]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68444]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68444]
  - Resolves: RHEL-58316
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel10.0)
  - Resolves: RHEL-68444
    (The new "boot order" feature is sometimes not working as expected [RHEL 10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-69047]
  - Resolves: RHEL-69047
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-32665]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-32665]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-32665]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-32665]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71939]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67108]
  - Resolves: RHEL-32665
    ([IBM 10.0 FEAT] KVM: CPU model for new IBM Z HW - qemu-kvm part)
  - Resolves: RHEL-71939
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-67108
    ([aarch64] [rhel-10.0] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-qtest-x86-numa-test-do-not-use-the-obsolete-pentium-.patch [RHEL-28972]
  - kvm-tests-qtest-libqtest-add-qtest_has_cpu_model-api.patch [RHEL-28972]
  - kvm-tests-qtest-x86-check-for-availability-of-older-cpu-.patch [RHEL-28972]
  - kvm-target-cpu-models-x86-Remove-the-existing-deprecated.patch [RHEL-28972]
  - kvm-x86-cpu-deprecate-cpu-models-that-do-not-support-x86.patch [RHEL-28971]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-36329]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-36329]
  - kvm-s390x-remove-deprecated-rhel-machine-types.patch [RHEL-39898]
  - kvm-s390x-select-correct-components-for-no-board-build.patch [RHEL-39898]
  - kvm-target-s390x-Add-a-CONFIG-switch-to-disable-legacy-C.patch [RHEL-39898]
  - kvm-target-s390x-cpu_models-Disable-everything-up-to-the.patch [RHEL-39898]
  - kvm-target-s390x-Revert-the-old-s390x-CPU-model-disablem.patch [RHEL-39898]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-43409 RHEL-43410]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-43409 RHEL-43410]
  - Resolves: RHEL-28972
    (x86: Remove the existing deprecated CPU models on RHEL10)
  - Resolves: RHEL-28971
    (Consider deprecating CPU models like "Nehalem" / "IvyBridge" on RHEL 10)
  - Resolves: RHEL-36329
    ([RHEL10.0.beta][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)
  - Resolves: RHEL-39898
    (s390: Remove the legacy CPU models on RHEL10)
  - Resolves: RHEL-43409
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-43410
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-46239]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-46239]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-46239]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-46239]
  - Resolves: RHEL-46239
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-40959]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-40959]
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-40959]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-40959]
  - Resolves: RHEL-40959
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-Enable-vhost-user-scmi-devices.patch [RHEL-50165]
  - Resolves: RHEL-50165
    (Enable 'vhost-user-scmi-pci' and 'vhost-user-scmi' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-51901]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52599]
  - Resolves: RHEL-51901
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command[RHEL-10])
  - Resolves: RHEL-52599
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-x86-cpu-update-deprecation-string-to-match-lowest-un.patch [RHEL-54260]
  - Resolves: RHEL-54260
    ([RHEL10] Need to update the deprecated CPU model warning message)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-2
changelog:
  - kvm-x86-create-new-pc-q35-machine-type-for-rhel-9.6.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-arm-create-new-virt-machine-type-for-rhel-9.6.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-create-pc-i440fx-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-create-pc-q35-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-arm-create-virt-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-remove-deprecated-rhel-machine-types.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-remove-stale-compat-definitions.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-RH-Author-Shaoqin-Huang-shahuang-redhat.com.patch [RHEL-38374]
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-57028]
  - Resolves: RHEL-29002
    (Remove the existing deprecated machine types in RHEL-10)
  - Resolves: RHEL-29003
    (Deprecate RHEL-9 machine types in RHEL-10)
  - Resolves: RHEL-35587
    (Create a pc-i440fx-rhel10.0 machine type)
  - Resolves: RHEL-38411
    ([Fujitsu 10.0 FEAT]: qemu-kvm: Continue to support i440fx for RHEL10)
  - Resolves: RHEL-45141
    (Introduce virt-rhel10.0 arm-virt machine type [aarch64])
  - Resolves: RHEL-38374
    (aarch64 SMBIOS 'Manufacturer' and 'Product Name' differ from x86 ones [rhel-10])
  - Resolves: RHEL-57028
    (fsfreeze hooks break on the systems first restorecon [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-3
changelog:
  - kvm-hostmem-Apply-merge-property-after-the-memory-region.patch [RHEL-58936]
  - Resolves: RHEL-58936
    ([RHEL-10.0] QEMU core dump on applying merge property to memory backend)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100438)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829)
  - Secure Execution: Add tool to verify host-key documents (RHEL-136795)
  - Resolves: RHEL-100438 RHEL-71829 RHEL-136795


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Make queue_track the default backend
  - Remove LTO build flags
  - Remove the -m64 build flag
  Resolves: RHEL-105604 RHEL-114506


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: Frank Ch. Eigler <fche@redhat.com> - 5.1-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases

    * Thu Jan 25 2024 Frank Ch. Eigler <fche@redhat.com> - 5.1-17062192g5fd8daba
  - Automated weekly rawhide release
  - Applied spec changes from upstream git


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-1
changelog:
  - Upstream 3.23.0 final
  - configure --enable-lto
  - Remove all upstreamed patches
  - Add BuildRequires: python3-devel for running testsuite.
  - Update license tags to spdx


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-4
changelog:
  - Add VALGRIND_3_26_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
    - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
    - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
    - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
    - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
    - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch
    - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
    - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-2
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove cache=none
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-3
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove cache=none
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-4
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-1
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-2
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.17-1
changelog:
  - Rebase to virt-v2v 2.7.17
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Add virt-v2v -io vddk-noextents=true so we can test noextents
    resolves: RHEL-88864
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.0-2
changelog:
  - Rebase to virt-v2v 2.8.0
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Add virt-v2v -io vddk-noextents=true so we can test noextents
    resolves: RHEL-88864
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-1
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Add virt-v2v -io vddk-noextents=true so we can test noextents
    resolves: RHEL-88864
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-7
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-8
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.10-1
changelog:
  - Rebase to virt-v2v 2.9.10
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.10-2
changelog:
  - Rebase to virt-v2v 2.9.10
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove cache=none
    resolves: RHEL-135617


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.8-1
changelog:
  - Rebase to virt-v2v 2.9.8
    resolves: RHEL-111241
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.3-1
changelog:
  - Rebase to 1.13.3 [RHEL-133034]
  - Resolves: RHEL-133034
    (Rebase virtiofsd to latest version for RHEL 10.2)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


