# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
changelog:
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
changelog:
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
changelog:
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Jon Maloy <jmaloy@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507]
  - Resolves: RHEL-133507
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-4
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232]
  - Resolves: RHEL-82232
    ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106149


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.4-1
changelog:
  - Update to latest upstream version 1.7.4
  - Resolves: RHEL-153381 : Fix the role failing on steps that copy logs to the controller EL9


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139144
  - Add suppport for passkey management
    Resolves: RHEL-139257
  - Add suppport for sysaccount management
    Resolves: RHEL-140601
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140607


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147734


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Colin Walters <walters@verbum.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Fix mount point check regression breaking bootc-image-builder
  - Resolves: RHEL-142112


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0
  - Resolves: RHEL-151443


author: Joseph Marrero <jmarrero@fedoraproject.org> - 1.15.1-1
changelog:
  - Update to 1.15.1
  - https://github.com/bootc-dev/bootc/releases/tag/v1.15.1
  - Resolves: #RHEL-168117


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Jon Maloy <jmaloy@redhat.com> - 4.0.2-11
changelog:
  - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-137760


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121734
  - Added channel binding support
  - resolves: RHEL-103417


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Jon Maloy <jmaloy@redhat.com> - 24.4-8
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876]
  - Resolves: RHEL-128876
    ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 3:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-111919


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 1:1.9.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:1-135
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111919


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163817
  - Resolves: RHEL-163838

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158208)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-37
changelog:
  - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Ales Matej <amatej@redhat.com> - 4.14.0-33
changelog:
  - autoremove: when a dangling protected dependency is found produce a wanrning
    and skip it (RHEL-76112)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-16
changelog:
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
  - fix building with latest openssl (RHEL-140619)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Pavel Valena <pvalena@redhat.com> - 057-110.git20260130
changelog:
  - fix(systemd-repart): allow partition format
  - feat(install.d):according to the changes of
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service
  - fix(pkcs11): delete trailing dot on
  - fix(multipath): disable user_friendly_names with mpathconf
    Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-100
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-105
changelog:
  - bundled urllib3: fix CVE-2025-66471
  - bundled urllib3: fix CVE-2026-21441
    Resolves: RHEL-139799, RHEL-140796


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-110
changelog:
  - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
    CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
    Resolves: RHEL-146344


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-111
changelog:
  - bundled cryptography: replace with dependency to fix CVE-2026-26007
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-148437, RHEL-155677


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.3.4-17
changelog:
  - fix(server): load firewall rules before claiming dbus
  - fix(nftables): ipset: add entries from GLib loop when idle
  - fix(systemd): Requires dbus


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Lukáš Zaoral <lzaoral@redhat.com>- 3.0.4-9
changelog:
  - backport the following fixes from Fedora:
    - fix header conflicts in multilib installs (RHEL-134741)
    - fix rpmlint warnings


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-3
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
    Resolves: RHEL-142348, RHEL-142332


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-6
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
    Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
    Resolves: RHEL-149043, RHEL-149066, RHEL-155994


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-8
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162960, RHEL-162986


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116513)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-43
changelog:
  - Backport passwordless feature to RHEL 9
    Resolves: https://redhat.atlassian.net/browse/RHEL-139178


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-44
changelog:
  - Add pam-extension helpers in pam-extensions-devel
    Related: https://redhat.atlassian.net/browse/RHEL-139178


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - Rebase to 3.8.10
  - Revert defaulting to PBMAC1 in FIPS mode
  - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-2
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-144960: CVE-2026-21721
  - Resolves RHEL-145419: CVE-2025-61728
  - Resolves RHEL-146103: CVE-2025-61726
  - Resolves RHEL-149639: CVE-2025-68121


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-12
changelog:
  - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.5-1
changelog:
  - Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
  - feat: Malware Detection wildcards support and fix concurrent scan false
    positives (#4746) (63891960+mtclinton@users.noreply.github.com)
  - chore(pre-commit): update and add new hook conventional-pre-commit
    (xiangceliu@redhat.com)
  - chore(build): enable packit building for release branch
    (xiangceliu@redhat.com)
  - feat: add all rules scanned to malware detection upload (#4735)
    (63891960+mtclinton@users.noreply.github.com)
  - fix(data-processing): fix unpredictable behavior of --context (#4740)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
  - fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
    core-selinux (xiangceliu@redhat.com)
  - feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
  - chore(spec): New spec "podman system info --json" for data analysis
    (huali@redhat.com)
  - chore(manifests): remove/merge remained useless components (#4747)
    (xiangceliu@redhat.com)
  - chore(manifests): use the base module instead of component (#4730)
    (xiangceliu@redhat.com)
  - chore: add egg_release back to collection with a condition (#4729)
    (xiangceliu@redhat.com)
  - fix(build): prepare the filters.yaml before setting up  (#4745)
    (xiangceliu@redhat.com)
  - chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
  - chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
    (xiangceliu@redhat.com)
  - chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
  - chore(test): don't pass context when root is passed to initialize_broker
    (#4720) (xiangceliu@redhat.com)
  - chore: update PR template and remove RPM/Egg delivery guide (#4723)
    (xiangceliu@redhat.com)
  - feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
    (#4705) (44796653+huali027@users.noreply.github.com)
  - feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
    (44796653+huali027@users.noreply.github.com)
  - fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
  - feat: add CoreEgg/CoreRpm to identify current collector (#4724)
    (xiangceliu@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive
  - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system)
  - RHEL-145854 Include latest fixes in python3-ipatests package
  - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - RHEL-141500 ipa use systemd-sysusers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3
changelog:
  - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured"
  - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-116896)
    - Check that expected NSS token matches the current FIPS state (RHEL-116897)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898)
    - Check that allowed_uids in the SSSD config is valid (RHEL-79092)


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-1
changelog:
  - Update to 8u482-b08 (GA).
  - Update release notes for 8u482-b08.
  - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this
  - Turn on system FreeType as on later JDK versions and add to _privatelibs
  - Set bundled FreeType version to 2.13.2 following JDK-8316028
  - Bump LCMS 2 version to 2.14.0 following JDK-8297088
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-142687
  - Resolves: RHEL-139534
  - Resolves: RHEL-131588
  - Resolves: RHEL-131600
  - Resolves: RHEL-142875
  - Resolves: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142687
  - Related: RHEL-139534
  - Related: RHEL-131588
  - Related: RHEL-131600
  - Related: RHEL-142875
  - Related: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-3
changelog:
  - Update tagging scripts to include signature checks and correctly handle gating
  - Add gating scripts to simplify obtaining results and waiving issues
  - Resolves: RHEL-147634
  - Resolves: RHEL-151197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Resolves: RHEL-131590
  - Resolves: RHEL-131601
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - Resolves: RHEL-139552
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set rpmrelease to 2
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set fipsver to e1780dd5d39
  - Resolves: RHEL-122136


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Add test to ensure blocked.certs is valid (OPENJDK-4362)
  - Restore NEWS file so portable can be rebuilt
  - Resolves: RHEL-149327


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set portablerelease to 2
  - Remove test to ensure blocked.certs is valid, done in portable
  - Related: RHEL-122136
  - Related: RHEL-131590
  - Related: RHEL-131601
  - Related: RHEL-139552
  - Related: RHEL-149327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142859
  - Related: RHEL-139560
  - Related: RHEL-131592
  - Related: RHEL-131602
  - Related: RHEL-122121
  - Related: RHEL-142820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139577
  - Resolves: RHEL-143373
  - Resolves: RHEL-143368
  - Resolves: RHEL-142856
  - Resolves: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139577
  - Related: RHEL-142856
  - Related: RHEL-142808


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-688.el9]
changelog:
  - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
  - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
  - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
  - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
  - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
  - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
  - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
  - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
  - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
  - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
  - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
  - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
  - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
  - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
  - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
  - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
  - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
  - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]
  - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
  - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765]
  - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
  - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
  - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
  - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
  - redhat: update self-test data (Patrick Talbert)
  - redhat: set defaults for 9.8 (Patrick Talbert)
  - gitlab-ci: disttag override for 9.8 (Patrick Talbert)
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157931]
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-151429]
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Desnes Nunes) [RHEL-147786]
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Desnes Nunes) [RHEL-147786] {CVE-2025-68331}
  - xhci: dbgtty: fix device unregister: fixup (Desnes Nunes) [RHEL-147786]
  - xhci: dbgtty: fix device unregister (Desnes Nunes) [RHEL-147786]
  - tty: fix tty_port_tty_*hangup() kernel-doc (Desnes Nunes) [RHEL-147786]
  - tty: introduce and use tty_port_tty_vhangup() helper (Desnes Nunes) [RHEL-147786]
  - usb: storage: sddr55: Reject out-of-bound new_pba (Desnes Nunes) [RHEL-147786] {CVE-2025-40345}
  - USB: serial: option: add support for Rolling RW101R-GL (Desnes Nunes) [RHEL-147786]
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Desnes Nunes) [RHEL-147786]
  - drivers/usb/dwc3: fix PCI parent check (Desnes Nunes) [RHEL-147786]
  - usb: storage: Fix memory leak in USB bulk transport (Desnes Nunes) [RHEL-147786] {CVE-2025-68288}
  - xhci: sideband: Fix race condition in sideband unregister (Desnes Nunes) [RHEL-147786]
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Desnes Nunes) [RHEL-147786]
  - xhci: fix stale flag preventig URBs after link state error is cleared (Desnes Nunes) [RHEL-147786]
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Desnes Nunes) [RHEL-147786]
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Desnes Nunes) [RHEL-147786] {CVE-2025-68282}
  - USB: serial: option: add Telit FN920C04 ECM compositions (Desnes Nunes) [RHEL-147786]
  - usb: roles: get usb role switch from parent only for usb-b-connector (Desnes Nunes) [RHEL-147786]
  - Revert "tcpm: allow looking for role_sw device in the main node" (Desnes Nunes) [RHEL-147786]
  - USB: serial: option: add Quectel RG255C (Desnes Nunes) [RHEL-147786]
  - tcpm: allow looking for role_sw device in the main node (Desnes Nunes) [RHEL-147786]
  - tcpm: switch check for role_sw device with fw_node (Desnes Nunes) [RHEL-147786]
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk (Desnes Nunes) [RHEL-147786]
  - USB: serial: option: add UNISOC UIS7720 (Desnes Nunes) [RHEL-147786]
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend (Desnes Nunes) [RHEL-147786]
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Desnes Nunes) [RHEL-147786]
  - usb: xhci-pci: Fix USB2-only root hub registration (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: switch: split out ports definition (Desnes Nunes) [RHEL-147786]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Add ports and orientation-switch (Desnes Nunes) [RHEL-147786]
  - usb: typec: mux: gpio-sbu: Make enable gpio optional (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: gpio-sbu-mux: Make 'enable-gpios' optional (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: Don't call clk_bulk_disable_unprepare() twice (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Desnes Nunes) [RHEL-147786]
  - usb: vhci-hcd: Prevent suspending virtually attached devices (Desnes Nunes) [RHEL-147786]
  - USB: serial: option: add SIMCom 8230C compositions (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Fix use-after-free in tb_dp_dprx_work (Desnes Nunes) [RHEL-147786] {CVE-2025-40002}
  - docs: driver-api: fix spelling of "buses". (Desnes Nunes) [RHEL-147786]
  - media: Documentation: media: Improve camera sensor documentation (Desnes Nunes) [RHEL-147786]
  - ipmi: Add docs for the IPMI IPMB driver (Desnes Nunes) [RHEL-147786]
  - usb: xhci: align PORTSC trace with one-based port numbering (Desnes Nunes) [RHEL-147786]
  - usb: xhci: correct indentation for PORTSC tracing function (Desnes Nunes) [RHEL-147786]
  - usb: xhci: improve TR Dequeue Pointer mask (Desnes Nunes) [RHEL-147786]
  - usb: xhci-pci: add support for hosts with zero USB3 ports (Desnes Nunes) [RHEL-147786]
  - usb: xhci: Update a comment about Stop Endpoint retries (Desnes Nunes) [RHEL-147786]
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" (Desnes Nunes) [RHEL-147786]
  - usb: gadget: Introduce free_usb_request helper (Desnes Nunes) [RHEL-147786]
  - usb: gadget: Store endpoint pointer in usb_request (Desnes Nunes) [RHEL-147786]
  - phy: fsl-imx8mq-usb: fix typec orientation switch when built as module (Desnes Nunes) [RHEL-147786]
  - usb: typec: Stub out typec_switch APIs when CONFIG_TYPEC=n (Desnes Nunes) [RHEL-147786]
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Desnes Nunes) [RHEL-147786]
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Desnes Nunes) [RHEL-147786]
  - redhat/configs: Enable DWC3 Generic Platform Driver on RHEL aarch64 (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: add generic driver to support flattened (Desnes Nunes) [RHEL-147786]
  - clk: Provide devm_clk_bulk_get_all_enabled() helper (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: dwc3: add support for SpacemiT K1 (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update thunderbolt.h header file (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update xdomain.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update usb4_port.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update usb4.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update tunnel.h function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update tunnel.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update tmu.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Add missing documentation in tb.h (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update tb.h function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update tb.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update switch.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update retimer.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update property.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update path.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update nvm.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Add missing documentation in nhi_regs.h ring_desc structure (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update nhi.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update lc.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update eeprom.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update domain.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update dma_port.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Add missing documentation in ctl.h tb_cfg_request struct (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update ctl.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update clx.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update cap.c function documentation (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Update acpi.c function documentation (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Handle mode transitions for CD321x (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Read data status in probe and cache its value (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Use read_power_status function in probe (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Update partner identity when power status was updated (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Register DisplayPort and Thunderbolt altmodes for cd321x (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Read USB4, Thunderbolt and DisplayPort status for cd321x (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Add cd321x struct with separate size (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Trace data status for CD321x correctly (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Move switch_power_state to tipd_data (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Move initial irq mask to tipd_data (Desnes Nunes) [RHEL-147786]
  - usb: typec: tipd: Clear interrupts first (Desnes Nunes) [RHEL-147786]
  - usb: host: enable USB offload during system sleep (Desnes Nunes) [RHEL-147786]
  - xhci: sideband: add api to trace sideband usage (Desnes Nunes) [RHEL-147786]
  - usb: offload: add apis for offload usage tracking (Desnes Nunes) [RHEL-147786]
  - usb: xhci-plat: separate dev_pm_ops for each pm_event (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: core: Introduce glue callbacks for flattened implementations (Desnes Nunes) [RHEL-147786]
  - usb: host: tegra: Remove manual wake IRQ disposal (Desnes Nunes) [RHEL-147786]
  - usb: host: xhci-tegra: Use platform_get_irq_optional() for wake IRQs (Desnes Nunes) [RHEL-147786]
  - usb: xhci: tegra: Support USB wakeup function for Tegra234 (Desnes Nunes) [RHEL-147786]
  - usb: udc: Add trace event for usb_gadget_set_state (Desnes Nunes) [RHEL-147786]
  - usb: typec: tcpci: add wakeup support (Desnes Nunes) [RHEL-147786]
  - dt-bindings: extcon: linux,extcon-usb-gpio: GPIO must be provided (Desnes Nunes) [RHEL-147786]
  - redhat/configs: Adding CONFIG_EXTCON_MAX14526 (Desnes Nunes) [RHEL-147786]
  - extcon: max14526: depends on I2C to prevent build warning/errors (Desnes Nunes) [RHEL-147786]
  - extcon: max14526: avoid defined but not used warning (Desnes Nunes) [RHEL-147786]
  - extcon: Add basic support for Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147786]
  - dt-bindings: extcon: Document Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147786]
  - usb: gadget: tegra-xudc: Remove redundant ternary operators (Desnes Nunes) [RHEL-147786]
  - usb: core: support eUSB2 double bandwidth large isoc URB frames (Desnes Nunes) [RHEL-147786]
  - usb: xhci: Add host support for eUSB2 double isochronous bandwidth devices (Desnes Nunes) [RHEL-147786]
  - usb: core: Introduce usb_endpoint_is_hs_isoc_double() (Desnes Nunes) [RHEL-147786]
  - usb: xhci: Use usb_endpoint_max_periodic_payload() (Desnes Nunes) [RHEL-147786]
  - usb: core: Add a function to get USB version independent periodic payload (Desnes Nunes) [RHEL-147786]
  - usb: core: eUSB2 companion descriptor is for isoc IN endpoints only (Desnes Nunes) [RHEL-147786]
  - usb: core: Parse eUSB2 companion descriptors for high speed devices only (Desnes Nunes) [RHEL-147786]
  - usb: core: Use le16_to_cpu() to read __le16 value in usb_parse_endpoint() (Desnes Nunes) [RHEL-147786]
  - usb: typec: ucsi: Add check for UCSI version (Desnes Nunes) [RHEL-147786]
  - usb: host: xhci-tegra: Remove redundant ternary operators (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: IXP4xx UDC bindings (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: Refactor dwc3_mode_show (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: Add trace event for dwc3_set_prtcap (Desnes Nunes) [RHEL-147786]
  - usb: storage: realtek_cr: Simplify residue calculation in rts51x_bulk_transport() (Desnes Nunes) [RHEL-147786]
  - usb: misc: Update link to EHSET pdf doc (Desnes Nunes) [RHEL-147786]
  - usb: usblp: Use min_t() to improve usblp_read() (Desnes Nunes) [RHEL-147786]
  - USB: serial: oti6858: remove extranenous ; after comment (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Use string choices helpers (Desnes Nunes) [RHEL-147786]
  - mmc: rtsx_usb_sdmmc: use modern PM macros (Desnes Nunes) [RHEL-147786]
  - mmc: rtsx_usb_sdmmc: Fix uninitialized variable issue (Desnes Nunes) [RHEL-147786]
  - Documentation: driver-api: usb: Limit toctree depth (Desnes Nunes) [RHEL-147786]
  - misc: rtsx: usb card reader: add OCP support (Desnes Nunes) [RHEL-147786]
  - memstick: Add timeout to prevent indefinite waiting (Desnes Nunes) [RHEL-147786]
  - misc: rtsx_pci: Add separate CD/WP pin polarity reversal support (Desnes Nunes) [RHEL-147786]
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Desnes Nunes) [RHEL-147786]
  - USB: Check no positive return values from pm_runtime_resume_and_get() (Desnes Nunes) [RHEL-147786]
  - usb: typec: ucsi: Add support for READ_POWER_LEVEL command (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147786]
  - PCI: Move is_pciehp check out of pciehp_is_native() (Desnes Nunes) [RHEL-147786]
  - PCI: pciehp: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147786]
  - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147786]
  - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (Desnes Nunes) [RHEL-147786]
  - PCI: Allow PCI bridges to go to D3Hot on all non-x86 (Desnes Nunes) [RHEL-147786]
  - dt-bindings: usb: Drop duplicate nvidia,tegra20-ehci.txt (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: qcom: Remove extcon functionality from glue layer (Desnes Nunes) [RHEL-147786]
  - USB: lower "Device is not authorized for usage" message to info (Desnes Nunes) [RHEL-147786]
  - usb: dwc3: qcom: Add shutdown handler (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Use Linux Foundation IDs for XDomain discovery (Desnes Nunes) [RHEL-147786]
  - phy: hisilicon: hi6220-usb: drop unused module alias (Desnes Nunes) [RHEL-147786]
  - dt-bindings: phy: fsl,imx8mq-usb: Drop 'db' suffix duplicating dtschema (Desnes Nunes) [RHEL-147786]
  - thunderbolt: Compare HMAC values in constant time (Desnes Nunes) [RHEL-147786]
  - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mete Durlu) [RHEL-155897]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-135610]
  - ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-135610]
  - x86/kexec: Copy ACPI root pointer address from config table (Baoquan He) [RHEL-130927]
  - redhat: update RHEL_MINOR version for start of RHEL-9.9 development (Jarod Wilson)
  - fs: use debug-only asserts around fd allocation and install (Ian Kent) [RHEL-133537]
  - fs: fix fd table size alignment properly (Ian Kent) [RHEL-133537]
  - fs: fd tables have to be multiples of BITS_PER_LONG (Ian Kent) [RHEL-133537]
  - fs/file: fix the check in find_next_fd() (Ian Kent) [RHEL-133537]
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-153749]
  - smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-153749]
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-153749]
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-153749]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-153431]
  - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Jan Stancek) [RHEL-150459]
  - ice: fix page leak for zero-size Rx descriptors (Petr Oros) [RHEL-152865]
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-117260]
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-117260]
  - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152061]
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-143362]
  - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-148438]
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-148438] {CVE-2023-54134}
  - cpufreq: intel_pstate: Fix crash during turbo disable (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Eliminate some code duplication (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Use mutex guard for driver locking (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Add Diamond Rapids OOB mode support (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Improve printing of debug messages (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: hybrid: Adjust energy model rules (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Add and use hybrid_has_l3() (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Use likely() optimization in intel_pstate_sample() (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Enable HWP without EPP if DEC is enabled (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Adjust frequency percentage computations (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Rearrange freq QoS updates using __free() (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Remove EPB-related code (David Arcari) [RHEL-128576]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (David Arcari) [RHEL-128576]
  - tools/power cpupower: Show C0 in idle-info dump (David Arcari) [RHEL-128578]
  - tools/power cpupower: Reset errno before strtoull() (David Arcari) [RHEL-128578]
  - tools/cpupower: Use strcspn() to strip trailing newline (David Arcari) [RHEL-128578]
  - tools/cpupower: Fix inverted APERF capability check (David Arcari) [RHEL-128578]
  - cpupower: idle_monitor: fix incorrect value logged after stop (David Arcari) [RHEL-128578]
  - tools/cpupower: Fix incorrect size in cpuidle_state_disable() (David Arcari) [RHEL-128578]
  - tools/cpupower: fix error return value in cpupower_write_sysfs() (David Arcari) [RHEL-128578]
  - intel_idle: Add C-states validation (David Arcari) [RHEL-128587]
  - intel_idle: Add cmdline option to adjust C-states table (David Arcari) [RHEL-128587]
  - intel_idle: Remove unnecessary address-of operators (David Arcari) [RHEL-128587]
  - intel_idle: Remove unused driver version constant (David Arcari) [RHEL-128587]
  - intel_idle: Remove the 'preferred_cstates' parameter (David Arcari) [RHEL-128587]
  - intel_idle: Initialize sysfs after cpuidle driver initialization (David Arcari) [RHEL-128587]
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150882] {CVE-2026-23191}
  - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-149742]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-150983]
  - net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [RHEL-150978]
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Lucas Oakley) [RHEL-148690]
  - PCI/sysfs: Calculate bin_attribute size through bin_size() (Myron Stowe) [RHEL-137250]
  - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-125085]
  - tools headers: Sync uapi/asm-generic/socket.h with the kernel sources (Davide Caratti) [RHEL-132649]
  - selftests: txtimestamp: add SCM_TS_OPT_ID test (Davide Caratti) [RHEL-132649]
  - net_tstamp: add SCM_TS_OPT_ID for RAW sockets (Davide Caratti) [RHEL-132649]
  - net_tstamp: add SCM_TS_OPT_ID to provide OPT_ID in control message (Davide Caratti) [RHEL-132649]
  - net-timestamp: make sk_tskey more predictable in error path (Davide Caratti) [RHEL-132649]
  - net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps (Davide Caratti) [RHEL-132649]
  - ipv6: drop feature RTAX_FEATURE_ALLFRAG (Davide Caratti) [RHEL-132649]
  - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126894] {CVE-2025-40064}
  - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix missing error handling for tx_queue (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix the condition check while programming congestion control (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix buffer overflow in debugfs code (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Congestion control settings using debugfs hook (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Use macro instead of hard coded value (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Support 2G message size (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (Sreekanth Reddy) [RHEL-108696 RHEL-96539]
  - RDMA/bnxt_re: Support extended stats for Thor2 VF (Sreekanth Reddy) [RHEL-108696 RHEL-96539]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-689.el9]
changelog:
  - redhat: Update decompressor image path (Mete Durlu) [RHEL-141416]
  - block: change blk_get_meta_cap() stub return -ENOIOCTLCMD (Ming Lei) [RHEL-154215]
  - block: fix lbmd_guard_tag_type assignment in FS_IOC_GETLBMD_CAP (Ming Lei) [RHEL-154215]
  - block: fix FS_IOC_GETLBMD_CAP parsing in blkdev_common_ioctl() (Ming Lei) [RHEL-154215]
  - block: handle pi_tuple_size in queue_limits_stack_integrity (Ming Lei) [RHEL-154215]
  - block: add __must_check attribute to sb_min_blocksize() (Ming Lei) [RHEL-154215]
  - xfs: check the return value of sb_min_blocksize() in xfs_fs_fill_super (Ming Lei) [RHEL-154215]
  - isofs: check the return value of sb_min_blocksize() in isofs_fill_super (Ming Lei) [RHEL-154215]
  - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector (Ming Lei) [RHEL-154215]
  - vfat: fix missing sb_min_blocksize() return value checks (Ming Lei) [RHEL-154215]
  - block: rate-limit capacity change info log (Ming Lei) [RHEL-154215]
  - badblocks: use sector_t instead of int to avoid truncation of badblocks length (Ming Lei) [RHEL-154215]
  - blk-mq: fix elevator depth_updated method (Ming Lei) [RHEL-154215]
  - block/mq-deadline: Switch back to a single dispatch list (Ming Lei) [RHEL-154215]
  - block/mq-deadline: Introduce dd_start_request() (Ming Lei) [RHEL-154215]
  - block: relax atomic write boundary vs chunk size check (Ming Lei) [RHEL-154215]
  - block: fix stacking of atomic writes when atomics are not supported (Ming Lei) [RHEL-154215]
  - block: update validation of atomic writes boundary for stacked devices (Ming Lei) [RHEL-154215]
  - block: use chunk_sectors when evaluating stacked atomic write limits (Ming Lei) [RHEL-154215]
  - ilog2: add max_pow_of_two_factor() (Ming Lei) [RHEL-154215]
  - block: make bio auto-integrity deadlock safe (Ming Lei) [RHEL-154215]
  - block: blocking mempool_alloc doesn't fail (Ming Lei) [RHEL-154215]
  - block: zero non-PI portion of auto integrity buffer (Ming Lei) [RHEL-154215]
  - fs: add ioctl to query metadata and protection info capabilities (Ming Lei) [RHEL-154215]
  - nvme: set pi_offset only when checksum type is not BLK_INTEGRITY_CSUM_NONE (Ming Lei) [RHEL-154215]
  - block: introduce pi_tuple_size field in blk_integrity (Ming Lei) [RHEL-154215]
  - block: rename tuple_size field in blk_integrity to metadata_size (Ming Lei) [RHEL-154215]
  - block: Enforce power-of-2 physical block size (Ming Lei) [RHEL-154215]
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (Ming Lei) [RHEL-154215]
  - lib/sbitmap: make sbitmap_get_shallow() internal (Ming Lei) [RHEL-154215]
  - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (Ming Lei) [RHEL-154215]
  - md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - block: Fix an error path in disk_update_zone_resources() (Ming Lei) [RHEL-154215]
  - block: rnbd-clt: Fix signedness bug in init_dev() (Ming Lei) [RHEL-154215]
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Ming Lei) [RHEL-154215]
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Ming Lei) [RHEL-154215]
  - blk-throttle: fix throtl_data leak during disk release (Ming Lei) [RHEL-154215]
  - xen-blkfront: Cache feature_persistent value before advertisement (Ming Lei) [RHEL-154215]
  - zram: off by one in read_block_state() (Ming Lei) [RHEL-154215]
  - block: fix ordering of recursive split IO (Ming Lei) [RHEL-154215]
  - block: skip unnecessary checks for split bio (Ming Lei) [RHEL-154215]
  - blk-crypto: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-154215]
  - md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - block: factor out a helper bio_submit_split_bioset() (Ming Lei) [RHEL-154215]
  - blk-crypto: fix missing blktrace bio split events (Ming Lei) [RHEL-154215]
  - md: fix mssing blktrace bio split events (Ming Lei) [RHEL-154215]
  - blk-mq: add QUEUE_FLAG_BIO_ISSUE_TIME (Ming Lei) [RHEL-154215]
  - block: initialize bio issue time in blk_mq_submit_bio() (Ming Lei) [RHEL-154215]
  - block: cleanup bio_issue (Ming Lei) [RHEL-154215]
  - drbd: always set BLK_FEAT_STABLE_WRITES (Ming Lei) [RHEL-154215]
  - null_blk: fix kmemleak by releasing references to fault configfs items (Ming Lei) [RHEL-154215]
  - block: don't merge bios with different app_tags (Ming Lei) [RHEL-154215]
  - block: rnbd-clt: Fix leaked ID in init_dev() (Ming Lei) [RHEL-154215]
  - block: fix cached zone reports on devices with native zone append (Ming Lei) [RHEL-154215]
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Ming Lei) [RHEL-154215]
  - zram: fix the issue that the write - back limits might overflow (Ming Lei) [RHEL-154215]
  - block/blk-throttle: drop unneeded blk_stat_enable_accounting (Ming Lei) [RHEL-154215]
  - block/blk-throttle: Fix throttle slice time for SSDs (Ming Lei) [RHEL-154215]
  - ps3disk: use memcpy_{from,to}_bvec index (Ming Lei) [RHEL-154215]
  - nbd: defer config unlock in nbd_genl_connect (Ming Lei) [RHEL-154215]
  - nbd: defer config put in recv_work (Ming Lei) [RHEL-154215]
  - block: freeze queue when updating zone resources (Ming Lei) [RHEL-154215]
  - block: handle zone management operations completions (Ming Lei) [RHEL-154215]
  - null_blk: set dma alignment to logical block size (Ming Lei) [RHEL-154215]
  - block: make REQ_OP_ZONE_OPEN a write operation (Ming Lei) [RHEL-154215]
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Ming Lei) [RHEL-154215]
  - block: require LBA dma_alignment when using PI (Ming Lei) [RHEL-154215]
  - block: Remove elevator_lock usage from blkg_conf frozen operations (Ming Lei) [RHEL-154215]
  - loop: fix backing file reference leak on validation error (Ming Lei) [RHEL-154215]
  - nbd: restrict sockets to TCP and UDP (Ming Lei) [RHEL-154215]
  - blk-throttle: fix access race during throttle policy activation (Ming Lei) [RHEL-154215]
  - block: use int to store blk_stack_limits() return value (Ming Lei) [RHEL-154215]
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Ming Lei) [RHEL-154215]
  - blk-zoned: Fix a lockdep complaint about recursive locking (Ming Lei) [RHEL-154215]
  - null_blk: Fix the description of the cache_size module argument (Ming Lei) [RHEL-154215]
  - block: fix kobject double initialization in add_disk (Ming Lei) [RHEL-154215]
  - block: ensure discard_granularity is zero when discard is not supported (Ming Lei) [RHEL-154215]
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ming Lei) [RHEL-154215]
  - block: sanitize chunk_sectors for atomic write limits (Ming Lei) [RHEL-154215]
  - block: mtip32xx: Fix usage of dma_map_sg() (Ming Lei) [RHEL-154215]
  - zram: refuse to use zero sized block device as backing device (Ming Lei) [RHEL-154215]
  - block: sunvdc: add check for mdesc_grab() returning NULL (Ming Lei) [RHEL-154215]
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ming Lei) [RHEL-154215]
  - rbd: fix possible memory leak in rbd_sysfs_init() (Ming Lei) [RHEL-154215]
  - xen-blkfront: Advertise feature-persistent as user requested (Ming Lei) [RHEL-154215]
  - xen-blkback: Advertise feature-persistent as user requested (Ming Lei) [RHEL-154215]
  - xen-blkfront: Apply 'feature_persistent' parameter when connect (Ming Lei) [RHEL-154215]
  - xen-blkback: Apply 'feature_persistent' parameter when connect (Ming Lei) [RHEL-154215]
  - xen-blkback: fix persistent grants negotiation (Ming Lei) [RHEL-154215]
  - xen/blkfront: fix comment for need_copy (Ming Lei) [RHEL-154215]
  - zram: clear IDLE flag after recompression (Ming Lei) [RHEL-154215]
  - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-148287]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-690.el9]
changelog:
  - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161530]
  - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161530]
  - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161530]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (David Arcari) [RHEL-128579]
  - x86/mce: Handle AMD threshold interrupt storms (David Arcari) [RHEL-128579]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (David Arcari) [RHEL-128579]
  - x86/mce: Add support for physical address valid bit (David Arcari) [RHEL-128579]
  - x86/mce: Save and use APEI corrected threshold limit (David Arcari) [RHEL-128579]
  - x86/mce/amd: Define threshold restart function for banks (David Arcari) [RHEL-128579]
  - x86/mce/amd: Remove redundant reset_block() (David Arcari) [RHEL-128579]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (David Arcari) [RHEL-128579]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (David Arcari) [RHEL-128579]
  - x86/mce: Unify AMD DFR handler with MCA Polling (David Arcari) [RHEL-128579]
  - x86/mce: Unify AMD THR handler with MCA Polling (David Arcari) [RHEL-128579]
  - x86/mce: Add a clear_bank() helper (David Arcari) [RHEL-128579]
  - x86/mce: Move machine_check_poll() status checks to helper functions (David Arcari) [RHEL-128579]
  - x86/mce: Separate global and per-CPU quirks (David Arcari) [RHEL-128579]
  - x86/mce: Do 'UNKNOWN' vendor check early (David Arcari) [RHEL-128579]
  - x86/mce: Define BSP-only SMCA init (David Arcari) [RHEL-128579]
  - x86/mce: Define BSP-only init (David Arcari) [RHEL-128579]
  - x86/mce: Set CR4.MCE last during init (David Arcari) [RHEL-128579]
  - x86/mce: Remove __mcheck_cpu_init_early() (David Arcari) [RHEL-128579]
  - x86/mce: Cleanup bank processing on init (David Arcari) [RHEL-128579]
  - x86/mce/amd: Put list_head in threshold_bank (David Arcari) [RHEL-128579]
  - x86/mce/amd: Remove smca_banks_map (David Arcari) [RHEL-128579]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (David Arcari) [RHEL-128579]
  - x86/mce/amd: Rename threshold restart function (David Arcari) [RHEL-128579]
  - Merge tag 'x86_tdx_for_6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip (David Arcari) [RHEL-128579]
  - x86/fred: Add a machine check entry stub for FRED [partial] (David Arcari) [RHEL-128579]
  - x86/mce/inject: Add missing MODULE_DESCRIPTION() line (David Arcari) [RHEL-128579]
  - x86/mce/inject: Only write MCA_MISC when a value has been supplied (David Arcari) [RHEL-128579]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Add the native_rdmsrq() helper (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (David Arcari) [RHEL-128579]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (David Arcari) [RHEL-128579]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (David Arcari) [RHEL-128579]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (David Arcari) [RHEL-128579]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-150569]
  - powerpc/watchpoints: Annotate atomic context in more places (Mamatha Inamdar) [RHEL-145581]
  - powerpc/watchpoint: Disable pagefaults when getting user instruction (Mamatha Inamdar) [RHEL-145581]
  - i2c: i801: Add support for Intel Nova Lake-S (David Arcari) [RHEL-152917]
  - i2c: i801: Fix the Intel Diamond Rapids features (David Arcari) [RHEL-152917]
  - i2c: i801: Add support for Intel Diamond Rapids (David Arcari) [RHEL-152917]
  - i2c: i801: Add support for Intel Wildcat Lake-U (David Arcari) [RHEL-152917]
  - i2c: i801: Hide Intel Birch Stream SoC TCO WDT (David Arcari) [RHEL-152917]
  - i2c: smbus: introduce Write Disable-aware SPD instantiating functions (David Arcari) [RHEL-152917]
  - i2c: i801: Use MMIO if available (David Arcari) [RHEL-152917]
  - i2c: i801: Switch to iomapped register access (David Arcari) [RHEL-152917]
  - i2c: i801: Improve too small kill wait time in i801_check_post (David Arcari) [RHEL-152917]
  - i2c: i801: Move i801_wait_intr and i801_wait_byte_done in the code (David Arcari) [RHEL-152917]
  - i2c: i801: Cosmetic improvements (David Arcari) [RHEL-152917]
  - x86/CPU/AMD: Add CPUID faulting support (David Arcari) [RHEL-140357]
  - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-127164]
  - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-127164]
  - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-142778]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-691.el9]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
  - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
  - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
  - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
  - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
  - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
  - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
  - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
  - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
  - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
  - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
  - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}
  - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-159333]
  - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-159333]
  - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-159333]
  - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-159333]
  - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-156455]
  - ALSA: update RHEL kconfigs for 6.19 upstream code (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Fix fragmentation regression in firmware download (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put (Jaroslav Kysela) [RHEL-152847]
  - ASoC: skylake: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - Revert "ALSA: usb: Increase volume range that triggers a warning" (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add allocation failure check for Entity name (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: cs35l56: Remove unnecessary struct cs_dsp_client_ops (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs4271: Fix resource leak in cs4271_soc_resume() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: fix memory leak in acp3x pdm dma ops (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23190}
  - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rt1320: fix intermittent no-sound issue (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: use hdev->info.link_mask directly (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: drop DSP responses for closed data streams (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: yc: Add quirk for HP 200 G2a 16 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs42l43: Correct handling of 3-pole jack load detection (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sof_sdw: Add a quirk for Lenovo laptop using sidecar amps with cs42l43 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-acpi-intel-ptl-match: fix name_prefix of rt1320-2 (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add quirk for Inspur S14-G1 (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek - fixed speaker no sound (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add quirk for Samsung 730QED to fix headphone (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Use the right limit for PCM OOB check (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl: imx-card: Do not force slot width to sample width (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23089}
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23076}
  - ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti (Jaroslav Kysela) [RHEL-152847]
  - ALSA: scarlett2: Fix buffer overflow in config retrieval (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23078}
  - ALSA: usb: Increase volume range that triggers a warning (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/tas2781: Add newly-released HP laptop (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rt5640: Fix duplicate clock properties in DT binding (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add quirk for HP Pavilion x360 to enable mute LED (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tlv320adcx140: fix word length (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tlv320adcx140: Propagate error codes during probe (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tlv320adcx140: fix null pointer (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23006}
  - ASoC: tlv320adcx140: invert DRE_ENABLE (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: Call init callbacks on the correct codec DAI (Jaroslav Kysela) [RHEL-152847]
  - soundwire: Add missing EXPORT for sdw_slave_type (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Prevent excessive number of frames (Jaroslav Kysela) [RHEL-152847] {CVE-2026-23208}
  - ALSA: hda/cirrus_scodec_test: Fix test suite name (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add quirk for Asus Zephyrus G14 2025 using CS35L56, fix speakers (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: yc: Fix microphone on ASUS M6500RE (Jaroslav Kysela) [RHEL-152847]
  - soundwire: bus: fix off-by-one when allocating slave IDs (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: Revert fix for uninitialized flat cache warning in tegra210_ahub (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: rockchip-spdif: Allow "port" node (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: realtek,rt5640: Document port node (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: realtek,rt5640: Update jack-detect (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: realtek,rt5640: Document mclk (Jaroslav Kysela) [RHEL-152847]
  - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/tas2781: Skip UEFI calibration on ASUS ROG Xbox Ally X (Jaroslav Kysela) [RHEL-152847]
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ops: fix pointer types to be big-endian (Jaroslav Kysela) [RHEL-152847]
  - regmap: maple: free entry on mas_store_gfp() failure (Jaroslav Kysela) [RHEL-152847]
  - ASoC: simple-card-utils: Check device node before overwrite direction (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa883x: suppress variant printk (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa884x: fix codec initialisation (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa881x: fix unnecessary initialisation (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa883x: fix unnecessary initialisation (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ac97: fix a double free in snd_ac97_controller_register() (Jaroslav Kysela) [RHEL-152847] {CVE-2025-71192}
  - ASoC: sun4i-spdif: Add missing kerneldoc fields for sun4i_spdif_quirks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc_sdw_utils: drop bogus container_of() error handling (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd937x: drop bogus container_of() error handling (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: add -bt tplg suffix if BT is present (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_sdw: shift SSP BT mask bits. (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: fix PCI SSID for one of the HP 200 G2i laptop (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add 6 amp CS35L63 with feedback (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add 6 amp CS35L56 with feedback (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl-asoc-card: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rt1320: update VC blind write settings (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_sai: Add missing registers to cache default (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_xcvr: provide regmap names (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_asrc_dma: fix duplicate debugfs directory error (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_easrc: fix duplicate debugfs directory error (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add support for HP Clipper Laptop (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add support for HP Trekker Laptop (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-intel-nvl-match: Drop rt722 l3 from the match table (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-acpi / SOF: Add best_effort flag to get_function_tplg_files op (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: pci-mtl: Change the topology path to intel/sof-ipc4-tplg (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: ipc4-topology: set playback channel mask (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: topology: Add context when sink or source widget is missing (Jaroslav Kysela) [RHEL-152847]
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Don't use __free() in cs_dsp_load() and cs_dsp_load_coeff() (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Remove __free() from cs_dsp_debugfs_string_read() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: audioreach: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6afe: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6apm: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6prm: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: subtract the endpoint that is not present (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sdm845: set quaternary MI2S codec DAI to I2S format (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: Fix uninitialized flat cache warning in tegra210_ahub (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Reorder USB mode selection quirk (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Update for native DSD support quirks (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Do not expose PCM and DSD on same altsetting unless DoP (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: Remove unnecessary print function dev_err() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/tas2781: Add new quirk for HP new project (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: cix-ipbloq: Use modern PM ops (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback (Jaroslav Kysela) [RHEL-152847]
  - soundwire: intel_ace2x: handle multi BPT sections (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Fix incorrect select SND_SOC_CS35L56_CAL_SYSFS_COMMON (Jaroslav Kysela) [RHEL-152847]
  - soundwire: pass sdw_bpt_section to cdns BPT helpers (Jaroslav Kysela) [RHEL-152847]
  - soundwire: introduce BPT section (Jaroslav Kysela) [RHEL-152847]
  - soundwire: qcom: adding support for v3.1.0 (Jaroslav Kysela) [RHEL-152847]
  - soundwire: qcom: remove unused rd_fifo_depth (Jaroslav Kysela) [RHEL-152847]
  - soundwire: qcom: deprecate qcom,din/out-ports (Jaroslav Kysela) [RHEL-152847]
  - soundwire: qcom: prepare for v3.x (Jaroslav Kysela) [RHEL-152847]
  - soundwire: cadence_master: make frame index trace more readable (Jaroslav Kysela) [RHEL-152847]
  - soundwire: only compute BPT stream in sdw_compute_dp0_port_params (Jaroslav Kysela) [RHEL-152847]
  - soundwire: cadence_master: set data_per_frame as frame capability (Jaroslav Kysela) [RHEL-152847]
  - soundwire: cadence: export sdw_cdns_bpt_find_bandwidth (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: export hda_sdw_bpt_get_buf_size_aligment (Jaroslav Kysela) [RHEL-152847]
  - soundwire: intel_ace2x: add fake frame to BRA read command (Jaroslav Kysela) [RHEL-152847]
  - soundwire: cadence_master: add fake_size parameter to sdw_cdns_prepare_read_dma_buffer (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: dt-bindings: add CIX IPBLOQ HDA controller support (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/core: add addr_offset field for bus address translation (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: add CIX IPBLOQ HDA controller support (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add support for ASUS UM3406GA (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add support for HP Turbine Laptops (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Initialize status1 to fix uninitialized symbol errors (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cros_ec_codec: Remove unnecessary selection of CRYPTO (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6afe: fix bad guard conversion (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: Add PCI SSIDs to HP ProBook quirks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Revert use of __free(kfree) back to normal C cleanup (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd939x: fix OF node leaks on probe failure (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd938x: fix OF node leaks on probe failure (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd937x: fix OF node leaks on probe failure (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Simplify with usb_endpoint_max_periodic_payload() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for more HP laptops (Jaroslav Kysela) [RHEL-152847]
  - ALSA: rawmidi: Fix inconsistent indenting warning reported by smatch (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: Modify awinic amplifier dsp read and write functions (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Log a message if firmware is missing (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Fixup some more Kconfig issues (Jaroslav Kysela) [RHEL-152847]
  - ASoC: nau8325: Delete a stray tab (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Don't require client to provide a struct cs_dsp_client_ops (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_micfil: Set channel range control (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_micfil: Add default quality for different platforms (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: sof_sdw: Add codec_info for cs42l45 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: Add cs42l45 support functions (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: sof_sdw: Add ability to have auxiliary devices (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: Move codec_name to dai info (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: Add codec_conf for every DAI (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Align mute controls to ALSA expectations (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add terminal type into input/output widget name (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Use __free(kfree) instead of manual freeing (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Use kvzalloc() to allocate control caches (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Take pwr_lock around reading controls debugfs (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: catpt: Do not block the system from suspending (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: catpt: Do not ignore errors on runtime resume (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: catpt: Fix probing order of driver components (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: catpt: Switch to resource_xxx() API (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: catpt: Fix offset checks (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Remove redundant download buffer allocator (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: remove Kconfig dependency on TEGRA20_APB_DMA (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Implement jack detection for HP Thunderbolt Dock G2 (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Modularize realtek_add_jack in mixer_quirks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_xcvr: use dev_err_probe() replacing dev_err() + return (Jaroslav Kysela) [RHEL-152847]
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Jaroslav Kysela) [RHEL-152847]
  - ASoC: stm32: sai: fix device leak on probe (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Add support for Onkyo SE-300PCIE (OK0010) (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Fix NULL vs IS_ERR() bug in sdca_dev_register_functions() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Add support for dedicated RCA switching (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Add ADC helper functions for GPIO (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Refactor resource alloc for sparse mappings (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Use explicit output flag for DAIO resources (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: Fix max bytes-per-interval calculation (Jaroslav Kysela) [RHEL-152847]
  - ALSA: usb-audio: #undef field_{get,prep}() before local definition (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Remove redundant calls to kunit_deactivate_static_stub() (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Store control length as 32-bit (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: avs: Replace snprintf() with scnprintf() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd934x: add explicit soundwire depenency (Jaroslav Kysela) [RHEL-152847]
  - ALSA: pcm: Harden the spk_alloc assumption check (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add basic SDCA function driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add basic SDCA class driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: add function devices (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add helper to write initialization writes (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Populate regmap cache for readable Controls (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Factor out helper to process Control defaults (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Use helper macros for control identification (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Move most of the messages from info to debug (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add comment for function reset polling (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Correct FDL locking in sdca_fdl_process() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add missing forward declaration in header (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add stubs for FDL helper functions (Jaroslav Kysela) [RHEL-152847]
  - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width (Jaroslav Kysela) [RHEL-152847]
  - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Use SND_SOC_BYTES_E_ACC() for CAL_DATA_RB control (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Use SOC_ENUM_EXT_ACC() for CAL_SET_STATUS control (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc.h: Add SND_SOC_BYTES_E_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc.h: Add SOC_ENUM_EXT_ACC() to allow setting access flags (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tas2781: Add tas2568/2574/5806m/5806md/5830 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: ti,tas2781: Add TAS2568/2574/5806M/5806MD/5830 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: arizona: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Append \n to debugfs string during read (Jaroslav Kysela) [RHEL-152847]
  - firmware: cs_dsp: Factor out common debugfs string read (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-rx-macro: fix mute_stream affecting all paths (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: remove unused WSA_MACRO_RX_MIX enum (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: remove main path event (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: fix path clock dependencies (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: add volume controls for mix path (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: remove mix path event (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: remove useless gain read/write sequence (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: remove unnecessary bounds check (Jaroslav Kysela) [RHEL-152847]
  - ALSA: pcmtest: Replace deprecated strcpy with strscpy_pad in setup_patt_bufs (Jaroslav Kysela) [RHEL-152847]
  - ASoC: wsa883x: drop GPIOD_FLAGS_BIT_NONEXCLUSIVE flag from GPIO lookup (Jaroslav Kysela) [RHEL-152847]
  - ASoC: wsa881x: drop GPIOD_FLAGS_BIT_NONEXCLUSIVE flag from GPIO lookup (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-core: Pre-check zero CPU/codec DAIs, handle early rtd->dais alloc failure (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: sof-client-probes: Replace snprintf() with scnprintf() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add companion amp Function (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: mediatek,mt8189-afe-pcm: add audio afe document (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: support PCM in platform driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: support TDM in platform driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: support I2S in platform driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: support ADDA in platform driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: support audio clock control (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8189: add common header (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-intel-nvl-match: add rt722 l3 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: add initial support for NVL-S (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: core: intel-dsp-config: Add support for NVL-S (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda: controllers: intel: add support for Nova Lake S (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/hdmi: intelhdmi: add HDMI codec ID for Intel NVL (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi: add NVL match tables (Jaroslav Kysela) [RHEL-152847]
  - PCI: Add Intel Nova Lake S audio Device ID (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ux500: mop500_ab8500: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: omap3pandora: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: omap-twl4030: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: omap-abe-twl6040: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: j721e-evm: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: davinci-evm: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: ti: ams-delta: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: tegra_wm8903: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: tegra210_ahub: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: tegra_asoc_machine: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sunxi: sun8i-codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sunxi: sun8i-codec-analog: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sunxi: sun50i-codec-analog: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sunxi: sun4i-codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sof-client-probes: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-pcm: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-jack: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-dapm: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-core: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_utils: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt_sdca_jack_common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_ti_amp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt_mf_sdca: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt_amp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt711: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt700: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_rt5682: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_maxim: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_dmic: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_cs_amp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_cs42l43: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_cs42l42: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: soc_sdw_bridge_cs35l56: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: tobermory: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdca: sdca_asoc: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: speyside: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: smdk_wm8994: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: littlemill: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: bells: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: samsung: aries_wm8994: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rockchip: rockchip_max98090: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rockchip: rk3288_hdmi_analog: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sc7180: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6usb: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6routing: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: t9015: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: g12a-tohdmitx: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: g12a-toacodec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: axg-tdm-interface: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: axg-spdifout: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: aiu-codec-ctrl: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: meson: aiu-acodec-ctrl: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8186-mt6366-common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mtk-dsp-sof-common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mtk-afe-platform-driver: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_rt5682: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_realtek_common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_pcm512x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_nuvoton_common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_nau8825: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_maxim_common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_es8336: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_cirrus_common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_da7219: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: sof_board_helpers: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: cht_bsw_rt5672: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: cht_bsw_rt5645: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: cht_bsw_max98090_ti: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bytcr_wm5102: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bytcr_rt5651: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bytcr_rt5640: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bytcht_es8316: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bytcht_cx2072x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: boards: bdw-rt5677: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: pcm: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: rt5640: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: control: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: rt5514: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: rt274: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: nau8825: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: es8336: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: avs: da7219: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: atom: sst-atom-controls: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: generic: audio-graph-card: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl: imx-rpmsg: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl: fsl-asoc-card: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm_hubs: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm_adsp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm9712: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm9713: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm9090: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm9081: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8998: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8997: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8996: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8995: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8994: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8993: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8991: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8990: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8988: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8985: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8978: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8983: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8974: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8971: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8962: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8961: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8960: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8955: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8940: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8904: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8903: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8900: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8804: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8776: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8753: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8770: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8750: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8737: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8731: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8728: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8711: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8580: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8523: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8510: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8400: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8350: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm5110: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm5102: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm0010: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm5100: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd937x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd934x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd9335: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: uda1380: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: twl6040: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: twl4030: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320dac33: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320aic3x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320aic32x4: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320aic31xx: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320adc3xxx: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas6424: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sta529: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas571x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sta350: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sta32x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ssm4567: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ssm2602: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ssm2518: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sma1307: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sma1303: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: simple-mux: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt721-sdca: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt715: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt715-sdca: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt712-sdca-dmic: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt712-sdca: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt711: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt711-sdca: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt700: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5682s: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5682: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5677: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5670: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5668: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5665: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5663: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5660: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5659: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5645: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5651: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5640: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5631: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5516: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5514: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt298: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt286: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt274: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1015: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1011: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: pcm512x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: pcm186x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8824: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8825: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8822: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8821: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8810: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: mt6359: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: mt6358: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ml26124: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max9867: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max9850: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98396: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98390: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98095: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98373: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98090: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98088: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: madera: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-va-macro: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-tx-macro: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-rx-macro: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lm49453: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: jz4770: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: jz4760: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: jz4740: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: hdmi-codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: hdac_hda: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: hdac_hdmi: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: hda: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: es8328: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: es8326: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: es8316: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: es7134: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da9055: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da732x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7219: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7219-aad: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7213: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7218: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs2072x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cx20442: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs53l30: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs48l32: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l92: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l90: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l85: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l35: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l24: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l15: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l73: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42xx8: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l56: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l52: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l51: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l43: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l43-jack: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs4234: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l56: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l45: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l41: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l33: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cpcap: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88261: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88395: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: audio-iio-aux: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: arizona-jack: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: alc5623: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adav80x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ak4641: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adau7118: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adau1977: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adau17x1: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adau1781: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adau1761: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ad193x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ad1836: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: 88pm860x: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ab8500: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: atmel: tse850-pcm5142: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: acp5x-mach: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: atmel: sam9g20_wm8731: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: acp3x-es83xx: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: acp-mach-common: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc.h: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: avs: Honor NHLT override when setting up a path (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: avs: Allow the topology to carry NHLT data (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-rx-macro: add SM6115 compatible (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-va-macro: add SM6115 compatible (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: atom: Replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: boards: fix HDMI playback lookup when HDMI-In capture used (Jaroslav Kysela) [RHEL-152847]
  - ALSA: gus: Remove unused declarations (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Allow restoring factory calibration through ALSA control (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Add control to read CAL_SET_STATUS (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_sdw: add codec speaker support for the SKU (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-ptl-match: add cs42l43_agg_l3_cs35l56_2 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_sdw: create BT dai link if bt_link_mask is set (Jaroslav Kysela) [RHEL-152847]
  - ASOC: Intel: sof_sdw: add quirk for Avell B.ON (OEM rebranded NUC15) (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add support for rt722_l0_rt1320_l23 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_sdw: Add quirk to exclude RT722 speaker (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: sof_rt5682: Add quirk override support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Alter error codes for calibration routine (Jaroslav Kysela) [RHEL-152847]
  - ALSA: au88x0: Fix array bounds warning in EQ drivers (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/senary: Replace magic numbers with defined constants (Jaroslav Kysela) [RHEL-152847]
  - regmap: sdw-mbq: Reorder regmap_mbq_context struct for better packing (Jaroslav Kysela) [RHEL-152847]
  - ASoC: stm32: dfsdm: don't use %pK through printk (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-pcm: Preserve hw parameters from components in dpcm_runtime_setup_fe (Jaroslav Kysela) [RHEL-152847]
  - ALSA: ac97: Fix kernel-doc warning for snd_ac97_reset (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: Use guard() for spin locks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm-dai: Use guard() for spin locks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6apm-dai: Use guard() for spin locks (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6afe: Use guard() for spin locks (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6asm: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6prm: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6afe: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6apm: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: q6adm: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: audioreach: Use automatic cleanup of kfree() (Jaroslav Kysela) [RHEL-152847]
  - ASoc: qcom: audioreach: remove unused variables (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: set runtime correctly for each stream (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm-dai: use q6asm_get_hw_pointer (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: add q6asm_get_hw_pointer (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm-dai: schedule all available frames to avoid dsp under-runs (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: q6asm: handle the responses after closing (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: ti,pcm1862: convert to dtschema (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: ti,tas2781: Add TAS5822 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tas2781: Add tas5822 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tas2781: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88261: pass pointer directly instead of passing the address (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: simplify aw87390_init() argument a bit (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: adding the two virtual Mux widgets in the routes (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_spdif: Constify some structures (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: adding two virtual Mux widgets for digital mics (Jaroslav Kysela) [RHEL-152847]
  - ALSA: line6: add support for POD HD Pro X (Jaroslav Kysela) [RHEL-152847]
  - regcache: maple: Split ->populate() from ->init() (Jaroslav Kysela) [RHEL-152847]
  - regcache: Add ->populate() callback to separate from ->init() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-core: check ops & auto_selectable_formats in snd_soc_dai_get_fmt() to prevent dereference error (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codec: wm8400: replace printk() calls with dev_*() device aware logging (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: remove hyphen from AMP<index> name_prexix (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: fixing the stream index (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: va-macro: fix revision checking (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS in SND_SOC_SOF_HDA_GENERIC (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: pcm: Set the PCM device name for HDMI (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs4271: Add support for the external mclk (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tas2783: Fix build for SoundWire API update (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sc7280: make use of common helpers (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sdm845: make use of common helpers (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sdw: remove redundant code (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add HID button IRQ (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add early IRQ handling (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add UMP timeout handling for FDL (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add completion for FDL start and stop (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add FDL-specific IRQ processing (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add FDL library for XU entities (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add SDCA FDL data parsing (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add UMP buffer helper functions (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Parse Function Reset max delay (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Parse XU Entity properties (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Force some SDCA Controls to be volatile (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Rely less on the ASoC component in IRQ handling (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Factor out a helper to find SDCA IRQ data (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Update externally_requested flag to cover all requests (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Pass device register map from IRQ alloc to handlers (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Pass SoundWire slave to HID (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Add manual PM runtime gets to IRQ handlers (Jaroslav Kysela) [RHEL-152847]
  - regmap: sdw-mbq: Don't assume the regmap device is the SoundWire slave (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SDCA: Rename SoundWire struct device variables (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib-test: Add test cases for cs_amp_set_efi_calibration_data() (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/cs35l56: Set cal_index to the amp index (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Add calibration command to store into UEFI (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Add function to write calibration to UEFI (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Return attributes from cs_amp_get_efi_variable() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib-test: Add cases for factory calibration helpers (Jaroslav Kysela) [RHEL-152847]
  - ALSA: hda/cs35l56: Create debugfs files for factory calibration (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Create debugfs files for factory calibration (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Add common code for factory calibration (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs-amp-lib: Add helpers for factory calibration (Jaroslav Kysela) [RHEL-152847]
  - ASoC: cs35l56: Read silicon ID during initialization and save it (Jaroslav Kysela) [RHEL-152847]
  - ASoC: renesas: fsi: Constify struct fsi_stream_handler (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: qcom,sm8250: add QRB2210 soundcard (Jaroslav Kysela) [RHEL-152847]
  - ALSA: maestro3: using vmalloc_array() to handle the code (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sdw_utils: add name_prefix for rt1321 part id (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc_sdw_utils: add cs35l57 support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: adding DAPM routing for digital output for max98091 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: fixing a space (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Fix function topology name check in profile info output (Jaroslav Kysela) [RHEL-152847]
  - ASoC: max98090/91: added DAPM widget for digital output for max98091 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl_aud2htx: add IEC958_SUBFRAME_LE format in supported list (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: add hyphen between name and index to amp name_prefix (Jaroslav Kysela) [RHEL-152847]
  - ASoC: rockchip: i2s-tdm: Omit a variable reassignment in rockchip_i2s_tdm_probe() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: don't check node names (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: va-macro: Clean up on error path in probe() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc.h: remove snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: uniphier: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: tegra210: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: tegra: tegra186: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8195: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8192: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8186: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: mt8183: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mediatek: common: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: catpt: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: intel: atom: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: fsl: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa884x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa883x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wsa881x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm_hubs: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm_adsp: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm9081: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8996: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8994: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8991: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8990: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8985: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8983: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8962: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8960: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8958: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8955: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8904: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8753: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8903: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8731: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8580: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8400: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm8350: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm5110: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm5102: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wm2000: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd939x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd938x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd937x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd934x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: wcd9335: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: uda1334: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: twl6040: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: twl4030: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tscs454: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tscs42xx: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320dac33: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320aic23: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320adcx140: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tlv320adc3xxx: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tfa989x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas5805m: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas5720: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas571x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas5086: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas2781: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: tas2562: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sta350: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sta32x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sma1307: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sma1303: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: sgtl5000: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt9123: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt711-sdca: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5670: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5665: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5659: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5631: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1015: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1318: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt1011: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: peb2466: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: pcm512x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: pcm1681: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ntp8835: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8822: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: nau8810: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: mt6660: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: mt6359: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: mt6358: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: msm8916-wcd-digital: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98925: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max9867: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98390: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98095: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98090: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max98088: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max9768: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: max9759: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: madera: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-wsa-macro: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-va-macro: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-tx-macro: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: lpass-rx-macro: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: idt821034: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: es8328: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da9055: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da732x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7219: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7218: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7213: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: da7210: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs48l32: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs47l15: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs43130: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l84: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l51: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l43: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs42l42: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs4271: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs4270: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs4234: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l45: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cs35l36: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: cros_ec: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: bd28623: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88399: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88395: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88261: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88166: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw88081: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: aw87390: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: arizona: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ak4619: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ak4641: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ak4458: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: adav80x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: ab8500: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: 88pm860x: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: atmel: use snd_kcontrol_chip() instead of snd_soc_kcontrol_component() (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: Add bindings for SpacemiT K1 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: amd_sdw: Propagate the PCI subsystem Vendor and Device IDs (Jaroslav Kysela) [RHEL-152847]
  - ASoC: amd: ps: Propagate the PCI subsystem Vendor and Device IDs (Jaroslav Kysela) [RHEL-152847]
  - ALSA: firewire-tascam: reserve resources for transferred isochronous packets at S400 (Jaroslav Kysela) [RHEL-152847]
  - ASoC: qcom: sc8280xp: Add support for Kaanapali (Jaroslav Kysela) [RHEL-152847]
  - ASoC: dt-bindings: qcom,sm8250: Add kaanapali sound card (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: va-macro: Rework version checking (Jaroslav Kysela) [RHEL-152847]
  - ASoC: mxs-saif: support usage with simple-audio-card (Jaroslav Kysela) [RHEL-152847]
  - ASoC: codecs: rt5670: use SOC_VALUE_ENUM_SINGLE_DECL for DAC2 L/R MX-1B (Jaroslav Kysela) [RHEL-152847]
  - dt-bindings: sound: Update ADMAIF bindings for tegra264 (Jaroslav Kysela) [RHEL-152847]
  - ASoc: tas2783A: Remove unneeded variable assignment (Jaroslav Kysela) [RHEL-152847]
  - ASoC: sof-function-topology-lib: escalate the log when missing function topoplogy (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Intel: use sof_sdw as default SDW machine driver (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: don't check the existence of dummy topology (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: add platform name into sof_intel_dsp_desc (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc_sdw_utils: export asoc_sdw_get_dai_type (Jaroslav Kysela) [RHEL-152847]
  - ASoC: Intel: export sof_sdw_get_tplg_files (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc_sdw_utils: add name_prefix to asoc_sdw_codec_info struct (Jaroslav Kysela) [RHEL-152847]
  - ASoC: soc-acpi: make some variables of acpi adr and link adr non-const (Jaroslav Kysela) [RHEL-152847]
  - ASoC: SOF: Don't print the monolithic topology name if function topology may be used (Jaroslav Kysela) [RHEL-152847]
  - ALSA: Add definitions for the bits in IEC958 subframe (Jaroslav Kysela) [RHEL-152847]
  - ACPICA: Add SoundWire File Table (SWFT) signature (Jaroslav Kysela) [RHEL-152847]
  - ASoC: wm8904: add DMIC support (Jaroslav Kysela) [RHEL-152847]
  - ASoC: wm8904: get platform data from DT (Jaroslav Kysela) [RHEL-152847]
  - ASoC: wm8904: Don't touch GPIO configs set to 0xFFFF (Jaroslav Kysela) [RHEL-152847]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-692.el9]
changelog:
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152697]
  - l2tp: reset skb control buffer on xmit (Guillaume Nault) [RHEL-152697]
  - gpu: host1x: Add MLOCK recovery for rest of engines (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Allow drivers to control VF BAR size (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Check that VF BAR fits within the reservation (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Allow IOV resources to be resized in pci_resize_resource() (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Add pci_resource_num_to_vf_bar() to convert VF BAR number to/from IOV resource (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Restore VF resizable BAR state after reset (Anusha Srivatsa) [RHEL-158926]
  - PCI: Cache offset of Resizable BAR capability (Anusha Srivatsa) [RHEL-158926]
  - workqueue: Add system_percpu_wq and system_dfl_wq (Anusha Srivatsa) [RHEL-158926]
  - gpio: tegra186: Support multi-socket devices (Charles Mirabile) [RHEL-151652]
  - gpio: tegra186: Simplify GPIO line name prefix handling (Charles Mirabile) [RHEL-151652]
  - redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco) [RHEL-116707]
  - redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco) [RHEL-116707]
  - rv: Replace non-existing rt_or_dl_task() in ltl monitors (Gabriele Monaco) [RHEL-116707]
  - rv: Fix wrong arguments to __assign_str() in tracepoints (Gabriele Monaco) [RHEL-116707]
  - perf test: Ensure lock contention using pipe mode (Michael Petlan) [RHEL-141682]
  - perf sched timehist: decode process names of processes in zombie state (Anubhav Shelat) [RHEL-33442]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-693.el9]
changelog:
  - x86/msr: Rename 'wrmsrl_on_cpu()' to 'wrmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl_safe_on_cpu()' to 'wrmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (David Arcari) [RHEL-128565]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (David Arcari) [RHEL-128565]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (David Arcari) [RHEL-128565]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (David Arcari) [RHEL-128565]
  - platform/x86: intel_telemetry: Fix PSS event register mask (David Arcari) [RHEL-128565]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (David Arcari) [RHEL-128565]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Remove double empty line (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (David Arcari) [RHEL-128565]
  - platform/x86/intel/uncore-freq: Replace sprintf() with sysfs_emit() (David Arcari) [RHEL-128565]
  - platform/x86/intel/uncore-freq: Replace sprintf() with scnprintf() (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (David Arcari) [RHEL-128565]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (David Arcari) [RHEL-128565]
  - platform/x86: intel: punit_ipc: fix memory corruption (David Arcari) [RHEL-128565]
  - New configs in drivers/platform (David Arcari) [RHEL-128565]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (David Arcari) [RHEL-128565]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (David Arcari) [RHEL-128565]
  - platform/x86/intel/hid: Add Nova Lake support (David Arcari) [RHEL-128565]
  - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-65700]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-694.el9]
changelog:
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165107]
  - Documentation/rtla: Document --bpf-action option (Tomas Glozar) [RHEL-153391]
  - Documentation/rtla: Rename sample/ to example/ (Tomas Glozar) [RHEL-153391]
  - rtla/tests: Run Test::Harness in verbose mode (Tomas Glozar) [RHEL-153391]
  - rtla/tests: Test BPF action program (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Add example for BPF action program (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Add --bpf-action option (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Support tail call from BPF program (Tomas Glozar) [RHEL-153391]
  - tools/power turbostat: Allow execution to continue after perf_l2_init() failure (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix delimiter bug in print functions (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix --show/--hide for individual cpuidle counters (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix incorrect format variable (David Arcari) [RHEL-128571]
  - tools/power turbostat: Consistently use print_float_value() (David Arcari) [RHEL-128571]
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (David Arcari) [RHEL-128571]
  - tools/power turbostat: Eliminate unnecessary data structure allocation (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix swidle header vs data display (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix illegal memory access when SMT is present and disabled (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix AMD RAPL regression (David Arcari) [RHEL-128571]
  - tools/power turbostat: version 2026.02.14 (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix and document --header_iterations (David Arcari) [RHEL-128571]
  - tools/power turbostat: Use strtoul() for iteration parsing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Favor cpu# over core# (David Arcari) [RHEL-128571]
  - tools/power turbostat: Expunge logical_cpu_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Enhance HT enumeration (David Arcari) [RHEL-128571]
  - tools/power turbostat: Simplify global core_id calculation (David Arcari) [RHEL-128571]
  - tools/power turbostat: Unify even/odd/average counter referencing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Allocate average counters dynamically (David Arcari) [RHEL-128571]
  - tools/power turbostat: Delete core_data.core_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Rename physical_core_id to core_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Cleanup package_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Cleanup internal use of "base_cpu" (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add L2 cache statistics (David Arcari) [RHEL-128571]
  - tools/power turbostat: Remove redundant newlines from err(3) strings (David Arcari) [RHEL-128571]
  - tools/power turbostat: Allow more use of is_hybrid flag (David Arcari) [RHEL-128571]
  - tools/power turbostat: Rename "LLCkRPS" column to "LLCMRPS" (David Arcari) [RHEL-128571]
  - tools/power turbostat.8: Document the "--force" option (David Arcari) [RHEL-128571]
  - tools/power turbostat: Harden against unexpected values (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump hypervisor name (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump CPUID.1.ECX[31] (Hypervisor) (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump CPUID(1) consistently with CPUID(6) (David Arcari) [RHEL-128571]
  - tools/power turbostat: AMD: msr offset 0x611 read failed: Input/output error (David Arcari) [RHEL-128571]
  - tools/power turbostat: version 2025.12.02 (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print wide names only for RAW 64-bit columns (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print percentages in 8-columns (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print "nan" for out of range percentages (David Arcari) [RHEL-128571]
  - tools/power turbostat: Enhance perf probe (David Arcari) [RHEL-128571]
  - tools/power turbostat: Validate RAPL MSRs for AWS Nitro Hypervisor (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add run-time MSR driver probe (David Arcari) [RHEL-128571]
  - tools/power turbostat: Set per_cpu_msr_sum to NULL after free (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add LLC stats (David Arcari) [RHEL-128571]
  - tools/power turbostat: Remove dead code (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor floating point printout code (David Arcari) [RHEL-128571]
  - tools/power turbostat.8: Update example (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor added-counter value printing code (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor added column header printing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Regression fix Uncore MHz printed in hex (David Arcari) [RHEL-128571]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-695.el9]
changelog:
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Jerry Snitselaar) [RHEL-147906]
  - of/device: Fix up of_dma_configure_id() stub (Jerry Snitselaar) [RHEL-147906]
  - iommu/tegra: fix device leak on probe_device() (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD (Jerry Snitselaar) [RHEL-147906]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-147906]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-147906]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Jerry Snitselaar) [RHEL-147906]
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Jerry Snitselaar) [RHEL-147906]
  - dma/pool: distinguish between missing and exhausted atomic pools (Jerry Snitselaar) [RHEL-147906]
  - iommufd: Make vfio_compat's unmap succeed if the range is already empty (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush piotlb for SVM and Nested domain (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush cache for PASID table before using it (Jerry Snitselaar) [RHEL-147906]
  - iommu/io-pgtable-arm: fix size_t signedness bug in unmap path (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Remove IAS (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Use core's primary handler and set IRQF_ONESHOT (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Fix error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix race condition during PASID entry replacement (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Clear Present bit before tearing down context entry (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Jerry Snitselaar) [RHEL-147906]
  - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-146140]
  - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-146140]
  - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-146140]
  - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-146140]
  - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-146140]
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Guillaume Nault) [RHEL-152688]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152688]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-696.el9]
changelog:
  - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-148561]
  - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-148561]
  - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-148561]
  - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-148561]
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-148561]
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-148561]
  - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-148561]
  - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-148561]
  - KVM: arm64: Discard PC update state on vcpu reset (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Eric Auger) [RHEL-154746]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Eric Auger) [RHEL-154746]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Eric Auger) [RHEL-154746]
  - KVM: arm64: Move pagetable definitions to common header (Eric Auger) [RHEL-154746]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Eric Auger) [RHEL-154746]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Eric Auger) [RHEL-154746]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Eric Auger) [RHEL-154746]
  - KVM: arm64: Prevent access to vCPU events before init (Eric Auger) [RHEL-154746]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-697.el9]
changelog:
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add missing resctrl initialization for Hygon (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Update documentation for telemetry events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Move RMID initialization to first mount (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Fix non-contiguous CBM check for Hygon (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Add CPU vendor detection for Hygon (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Define CPU vendor IDs as bits to match usage (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Fix a division by zero error on Hygon (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add energy/perf choices to rdt boot option (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Refactor mkdir_mondata_subdir() (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Read telemetry events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Find and enable usable telemetry events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add architectural event pointer (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Discover hardware telemetry events (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add an architectural hook called for first mount (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Support binary fixed point event counters (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Handle events that can be read from any CPU (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Make event details accessible to functions when reading events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Rename some L3 specific functions (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count() (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Clean up domain_remove_cpu_ctrl() (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Move L3 initialization into new helper function (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Improve domain type checking (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Update bit_usage to reflect io_alloc (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to modify io_alloc capacity bitmasks (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Modify struct rdt_parse_data to pass mode and CLOSID (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display io_alloc CBMs (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add user interface to enable/disable io_alloc feature (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display "io_alloc" support (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Implement "io_alloc" enable/disable handlers (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Detect io_alloc feature (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add SDCIAE feature in the command line options (Gavin Shan) [RHEL-163713]
  - x86/cpufeatures: Add support for L3 Smart Data Cache Injection Allocation Enforcement (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Gavin Shan) [RHEL-163713]
  - MAINTAINERS: resctrl: Add myself as reviewer (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Configure mbm_event mode if supported (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Provide interface to update the event configurations (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add the functionality to unassign MBM events (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add the functionality to assign MBM events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to display monitoring modes (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add ABMC feature in the command line options (Gavin Shan) [RHEL-163713]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Prepare for more monitor events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Remove the rdt_mon_features global variable (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Replace architecture event enabled checks (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Optimize code in rdt_get_tree() (Gavin Shan) [RHEL-163713]
  - Documentation: Fix filesystems typos (Gavin Shan) [RHEL-163713]
  - Prevent stripping of rtla and rv binaries during install (John Kacur) [RHEL-85867 RHEL-96913]
  - Fix rtla and rv debuginfo package definitions (John Kacur) [RHEL-85867 RHEL-96913]
  - Add debuginfo package for rtla tool (John Kacur) [RHEL-85867 RHEL-96913]
  - Add debuginfo package for rv tool (John Kacur) [RHEL-85867 RHEL-96913]


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.12.1-13
changelog:
  - Keylime: Registrar allows identity takeover via duplicate UUID registration
    Resolves: RHEL-130761


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145355
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-67468
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145359


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Karolina Kula <kkula@redhat.com> - 0.23.0-3
changelog:
  - Fix handling of LVM during the upgrade
  - Deliver initial improvements for Multipath during the upgrade
  - Fix remediation command to make symlimk in root directory relative
  - Remove RPM GPG keys of the source distribution when converting system
  - Replace distro specific packages during conversion
  - Improve error message when scanning invalid SSHD configuration
  - Update the leapp data files
  - Minor changes in logs and reports
  - Resolves: RHEL-110190, RHEL-110568


author: Karolina Kula <kkula@redhat.com> - 0.24.0-1
changelog:
  - Rebase to new upstream 0.24.0
  - Introduce new IPU path 9.8 -> 10.2
  - Remove obsoleted IPU paths
  - Handle the upgrade on systems with NVMe-FC storage
  - Added scan and checks for NVMe devices, inhibitingblocking upgrades on known problematic setups
  - Check installed Xorg RPMs for removed content
  - Detect installed Motif packages when upgrading to RHEL
  - Drop inhibitor for use of LiveMode on aarch64, s390x, ppcle64 architectures
  - Fix the leapp rerun command when upgrading using LiveMode
  - Ignore trailing slashes when checking that required mountpoints are persistent
  - Improve the error message when a problematic DNF repository definition is detected
  - Inhibit the upgrade when converting system to a different linux distribution with enabled Secure Boot
  - LiveMode: Do not install RPMs that are not essential in the initramfs by default
  - Migrate the UEFI configuration when converting to RHEL
  - Process enabled DNF module-streams correctly during the upgrade
  - Setup net.naming-scheme to handle NIC names correctly when upgrading to RHEL 10.2+ (not applied for Centos 10 yet)
  - Update CA bundle path in kerberos configuration
  - Wait until filesystems defined in FSTAB are initialized and mounted when booting into the upgrade environment
  - Resolves: RHEL-65265, RHEL-74265, RHEL-108106, RHEL-128266, RHEL-133549, RHEL-135847, RHEL-141861


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-14
changelog:
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-11
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85909
    Resolves: RHEL-85915
    Resolves: RHEL-85920
    Resolves: RHEL-87058
    Resolves: RHEL-87068
    Resolves: RHEL-87101
    Resolves: RHEL-87119
    Resolves: RHEL-88360
    Resolves: RHEL-88363


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-12
changelog:
  - Backport patches for various CVEs
    Resolves: RHEL-84797
    Resolves: RHEL-85888
    Resolves: RHEL-87080
    Resolves: RHEL-92284


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-18
changelog:
  - Resolves: RHEL-150661
  - Resolves: CVE-2025-4877
  - Resolves: CVE-2025-4878
  - Resolves: CVE-2025-5351
  - Resolves: CVE-2025-8114
  - Resolves: CVE-2025-8277
  - Resolves: CVE-2026-0964
  - Resolves: CVE-2026-0965
  - Resolves: CVE-2026-0966
  - Resolves: CVE-2026-0967
  - Resolves: CVE-2026-0968


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
  - qemu: Introduce privateData for hostdevs (RHEL-126345)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126345)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126345)
  - qemu: open iommufd FD from libvirt backend (RHEL-126345)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
  - qemu: Implement support for persistent reservation migration control (RHEL-140614)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866)
  - Introduce support for disk operation latency histogram collection (RHEL-147866)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
  - util: Move openning IOMMU device to viriommufd (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
  - util: Move openning VFIO device to virpci (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150353)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
  - qemu: Save IOMMUFD state into status XML (RHEL-150353)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
  - conf: Introduce iommufd enum for domaincaps (RHEL-138544)
  - qemu: Fill iommufd domain capability (RHEL-138544)
  - tests: properly mock VFIO and IOMMU checks (RHEL-138544)
  - iommufd: fix FD leak in case of error (RHEL-150353)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - domain_conf: initialize network hostdev private data (RHEL-151953)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-1
changelog:
  - Update to openwsman-2.8.1
    Resolves: RHEL-97643
  - Add libwsman-client.so.4 for backward compatibility
    Related: RHEL-97643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-2
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-127516
  - Fix bogus 'sscg' arguments
    Related: RHEL-118292


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.5.5-10
changelog:
  - add support for chronyd (RHEL-36757)
  - ignore normal "Server ready" startup message from fail2ban (RHEL-83940)


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-2
changelog:
  - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-18
changelog:
  - fix inverted usage of -n in snmptrapd (RHEL-101078)
  - fix use after free issue (RHEL-121091)
  - fix help and manpage for net-snmp-create-v3-user 
    script(RHEL-101614 and RHEL-103557)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-42
changelog:
  - Replace statfs64 with statfs (RHEL-127105)
  - NFS export symlink vulnerability fix (RHEL-127105)
  - mountd: Minor refactor of get_rootfh() (RHEL-127105)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
  - Add requires for selinux-policy (RHEL-127105)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-43
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158527)
  - nfsrahead: zero-initialise device_info struct (RHEL-158527)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158527)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28
changelog:
  - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connection


author: Petr Dancak <pdancak@redhat.com> - 2:1.20.1-29
changelog:
  - Resolves: RHEL-159563 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159542 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159450 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157891 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5
changelog:
  - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-6
changelog:
  - Resolves: RHEL-146529 -  CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections


author: Petr Dancak <pdancak@redhat.com> - 1:1.24.0-7
changelog:
  - Resolves: RHEL-159564 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159543 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159451 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157892 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-4
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-5
changelog:
  - RHEL-159565 CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-6
changelog:
  - RHEL-159544 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159452 CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-157893 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-5
changelog:
  - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9
    Resolves: RHEL-101161


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-141606
  - alt-name: Remove alt-names when interface marked as absent. RHEL-141602
  - hsr: Automatically disable IP on hsr port. RHEL-141609
  - hsr: add support for configuring "interlink" property. RHEL-141608
  - Support referring interface name using its alternative name. RHEL-141601


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Tomas Juhasz <tjuhasz@redhat.com> - 1:20.20.2-1
changelog:
  - Update to version 20.20.2
    Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change.
    Resolves: RHEL-154020
    Fixes:  CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547
    Resolves: RHEL-154021
    Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Tomas Juhasz <tjuhasz@redhat.com> - 3.1.14-1
changelog:
  - Rebase to 3.1.14
  - Change 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  - Resolves: RHEL-153975 RHEL-153974


author: Tomas Juhasz <tjuhasz@redhat.com> - 3.1.14-1
changelog:
  - Rebase to 3.1.14
  - Change 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  - Resolves: RHEL-153979 RHEL-153978


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117392]
  - Resolves: RHEL-117392
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])


author: Lili Du <ldu@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118505]
  - Resolves: RHEL-118505
    ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.10 [RHEL-144578]
  - Resolves: RHEL-144578
    ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-5 + 0.10.4-8
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155825
  - Fix incorrect claim about SSH_AUTH_SOCK in pam_ssh_agent_auth manual page
    Resolves: RHEL-122302


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-8
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163366
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155161
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164754
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166251
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166235
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166203
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166219


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-1
changelog:
  - Rebase to 2026.1
    Release https://github.com/ostreedev/ostree/releases/tag/v2026.1
    Resolves: #RHEL-167078


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


