# changelog

author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:51.2-1
changelog:
  - Upgrade to 1.51.2 (dev)
  - Fix OVS race condition removing OVS interface (RHEL-60883)
  - Fix OVS DPDK interface name validation (RHEL-60884)
  - Support IPVLAN interface (RHEL-60885)


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Arjun Shankar <arjun@redhat.com> - 2.39-16
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 7f9f25f255ee2c00178779fbce502f4b94b848b9:
  - Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c
  - x86: Properly set x86 minimum ISA level [BZ #31883]
  - x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867]
  - localedata: ssy_ER: Fix syntax error
  - malloc: New test to check malloc alternate path using memory obstruction
  - malloc: Improve aligned_alloc and calloc test coverage.
  - malloc/Makefile: Split and sort tests
  - x86/cet: fix shadow stack test scripts


author: Arjun Shankar <arjun@redhat.com> - 2.39-21
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 4bdcc1963bc2b5ba5f8e319e402d9eb2cb6096c1:
  - manual: make setrlimit() description less ambiguous
  - manual/stdio: Clarify putc and putwc
  - malloc: add multi-threaded tests for aligned_alloc/calloc/malloc
  - malloc: avoid global locks in tst-aligned_alloc-lib.c
  - resolv: Track single-request fallback via _res._flags (bug 31476)
  - resolv: Do not wait for non-existing second DNS response after error (bug 30081)
  - resolv: Allow short error responses to match any query (bug 31890)
  - elf: Fix localplt.awk for DT_RELR-enabled builds (BZ 31978)
  - Fix usage of _STACK_GROWS_DOWN and _STACK_GROWS_UP defines [BZ 31989]
  - Linux: Make __rseq_size useful for feature detection (bug 31965)
  - elf: Make dl-rseq-symbols Linux only
  - nptl: fix potential merge of __rseq_* relro symbols
  - s390x: Fix segfault in wcsncmp [BZ #31934]
  - stdlib: fix arc4random fallback to /dev/urandom (BZ 31612)
  - math: Provide missing math symbols on libc.a (BZ 31781)
  - math: Fix isnanf128 static build (BZ 31774)
  - math: Fix i386 and m68k exp10 on static build (BZ 31775)
  - math: Fix i386 and m68k fmod/fmodf on static build (BZ 31488)
  - posix: Fix pidfd_spawn/pidfd_spawnp leak if execve fails (BZ 31695)


author: Florian Weimer <fweimer@redhat.com> - 2.39-22
changelog:
  - Support clearing options in /etc/resolv.conf, RES_OPTIONS with a - prefix
  - Introduce the strict-error/RES_STRICTERR stub resolver option (RHEL-18039)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Akira TAGOH <tagoh@redhat.com> - 0.301-7
changelog:
  - Add a sub-package for variable font, abattis-cantarell-vf-fonts.
    Resolves: rhbz#2045012
  - Convert the spec file to the latest font packaging guidelines.


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)
  - Resolves: RHEL-66144


author: Ondřej Pohořelský <opohorel@redhat.com> - 3.2.5-6
changelog:
  - Convert licenses to SPDX format
  - Dropped MIT and Public Domain license as they are not present in upstream sources


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Nick Clifton <nickc@redhat.com> - 2.41-43
changelog:
  - Do not enable '-z separate code' by default - allow packages to choose to do it.
  - Add fix for discarded section counting for AArcch64 DT_RELR relocs.  (RHEL-42765)


author: Nick Clifton <nickc@redhat.com> - 2.41-46
changelog:
  - Import fix for AArch64 DT_RELR support (PR 31924).
  - More fixes for Intel's APX (part 1) extensions.  (RHEL-44713)
  - Total list of APX patches applied (so far):
  -  Feb 19 5190fa38286a5a6a664e21c04fde361b395d9f72 x86: support APX forms of U{RD,WR}MSR
  -  Feb  9 41e115853eef32304e3e6fcd7feb4ec116090ee0 x86/APX: with REX2 map 1 doesn't "chain" to maps 2 or 3
  -  Feb  9 5a635f1f59ad08e572e36419f1145433fd670214 x86/APX: VROUND{P,S}{S,D} encodings require AVX512{F,VL}
  -  Jan 19 2519809009ed5e250ad9ed9b6184d9c45dba5029 x86/APX: be consistent with insn suffixes
  -  Jan 19 eea4357967b6182459d423c4d919a7cb0219604b x86/APX: VROUND{P,S}{S,D} can generally be encoded
  -  Jan 15 3037cefe56affe48ac53d85b9e33c2c3a408c41f opcodes: gas: x86: define and use Rex2 as attribute not constraint
  -  Jan  9 7c3df3c680c2bee0b17e60bfbadc751c67e05ed0 x86: add missing APX logic to cpu_flags_match()
  -  Jan  9 7c3df3c680c2bee0b17e60bfbadc751c67e05ed0 x86: add missing APX logic to cpu_flags_match()
  -  Jan  8 a0c9f938521a36b34a27740e5008e35f0ddd2b3f i386: Use .insn describe jmpabs's testcases.
  -  Jan  8 a0c9f938521a36b34a27740e5008e35f0ddd2b3f i386: Use .insn describe jmpabs's testcases.
  -  Jan  7 f322084c7c842fbfd8c3291ff3f8d114173b4674 i386: Correct adcx suffix in disassembler
  -  Dec 29 eed38d8a02b277825a682d8d1daeb0bcc4508b04 Fix x86-64: Add R_X86_64_CODE_4_GOTPCRELX
  -  Dec 29 3d5a60de52556f6a53d71d7e607c6696450ae3e4 x86-64: Add R_X86_64_CODE_4_GOTPCRELX
  -  Dec 29 302a296de0e83d6c320cc0f0d5dd1a1d73182009 x86: Append "#pass" to APX tests
  -  Dec 29 302a296de0e83d6c320cc0f0d5dd1a1d73182009 x86: Append "#pass" to APX tests
  -  Dec 29 2eda6e3ecdd0ea93586a532d9464e430f708334a x86: Don't use .insn with '/'
  -  Dec 29 2eda6e3ecdd0ea93586a532d9464e430f708334a x86: Don't use .insn with '/'
  -  Dec 28 ce9cddf5dd2a614815b1d9affa67c9419599ff63 Add tests for APX GPR32 with extend evex prefix
  -  Dec 28 cca90632f83d47bc7f913e098c4531e52327d272 Support APX JMPABS for disassemble
  -  Dec 28 ac32c879b26af580e29ecaa152e3d9d999f34caa Support APX pushp/popp
  -  Dec 28 a6d0019eb7fcd634e12b7bcc535d5181c47fc82a ld: Mention support for Intel APX relocations in NEWS
  -  Dec 28 a6d0019eb7fcd634e12b7bcc535d5181c47fc82a ld: Mention support for Intel APX relocations in NEWS
  -  Dec 28 80d61d8d614d68a0b1932ed3a86d4cda01e5633e Support APX GPR32 with rex2 prefix 
  -  Dec 28 6967f19dcd3d2794976b2a193a0c30b626c92c3b Support APX NDD optimized encoding. 
  -  Dec 28 6177c84d5edc2cb6b197f00bd06380b7b24a719f Support APX GPR32 with extend evex prefix
  -  Dec 28 5e2f0c9a5f3d467a341a0c3d579d9c6ee6daa4d1 gas: Mention initial support for Intel APX in NEWS
  -  Dec 28 3083f376435662c747ab946bb84e6e6698985610 Support APX NDD
  -  Dec 28 2b1d6655c5c62673547b9676d811ef58ce3f0d1e Created an empty EVEX_MAP4_ sub-table for EVEX instructions.
  -  Dec 28 08a98d4c1331cc726c8c76c14d9db34d6f0aadd6 Support APX Push2/Pop2
  -  Dec 22 3e4a511bee874d73f9f749cc8cf3bc748b4d47b5 x86-64: refuse "high" 8-bit regs with .insn and VEX/XOP/EVEX encodings
  -  Dec 15 35266cb139697e00ee993118aa621fdac17e3f6e x86: fold assembly dialect attributes
  -  Jul  2 00a17c6ad068c95019e1f37cfc2d1b8aaebd6ecb Gold: Handle R_X86_64_CODE_4_GOTPC32_TLSDESC/R_X86_64_CODE_4_GOTTPOFF
  -  Jun  9 a533c8df598b5ef99c54a13e2b137c98b34b043c x86-64: Add R_X86_64_CODE_4_GOTTPOFF/R_X86_64_CODE_4_GOTPC32_TLSDESC
  -  Jun  8 3d5a60de52556f6a53d71d7e607c6696450ae3e4 x86-64: Add R_X86_64_CODE_4_GOTPCRELX
  -  Jun  8 4a54cb06585f568031dfd291d0fe45979ad75e98 gold: Handle R_X86_64_CODE_4_GOTPCRELX


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER

  Wed Jul 03 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-101
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -    Adding:
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.1
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.2
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Packit <hello@packit.dev> - 326-1
changelog:
  - cockpit-pcp package is now obsolete
  - cockpit/ws container: Connect to servers without installed Cockpit
  - cockpit/ws container: Support host specific SSH keys
  - Storage: Support for Stratis filesystem sizes and limits


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240807-1.git7ea320f
changelog:
  - fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
changelog:
  - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - LEGACY: drop cipher@pkcs12 = SEED-CBC
  - fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  - nss: be stricter with new purposes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
changelog:
  - TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
  - openssh: remove sntrup761x25519-sha512@openssh.com key_exchange


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3
changelog:
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519 and mlkem768secp256r1


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Pavol Zacik <pzacik@redhat.com> - 1:2.4.9-1
changelog:
  - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
  - RHEL-25804 Rebase CUPS to next upstream version - 2.4.9


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patches 0014-0015 are included in the soruce tarball
    * Patch 0001 is from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now 0002-0014
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules
  - Resolves: RHEL-50698


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jan Kolarik <jkolarik@redhat.com> - 4.20.0-1
changelog:
  - Update to 4.20.0 (RHEL-38831)
  - repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  - remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-37552)
  - spec: Do not add user site-packages directory to sys.path (RHEL-26646)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-2
changelog:
  - Disable downloading filelists by default (RHEL-12355)
  - Fix dnf upgrade-minimal documentation in dnf(8) manual (RHEL-39892)
  - Fix dnf remove-n, install-n, and autoremove-n commands to only match package
    names (RHEL-5747)


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-5
changelog:
  - Adapt the tests to a crypto policy without SHA-1 (RHEL-50218)
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671).


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-6
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-7
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49671)


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Pavel Valena <pvalena@redhat.com> - 101-1
changelog:
  - Update to dracut 101.
  - Remove network-legacy module.
  - Additional fixes on top of rebase (see patches).


author: Pavel Valena <pvalena@redhat.com> - 102-1
changelog:
  - Update to dracut 102.
    Resolves: RHEL-43460,RHEL-32237,RHEL-32506,RHEL-43460,RHEL-47145,RHEL-49744,RHEL-53350


author: Pavel Valena <pvalena@redhat.com> - 102-2
changelog:
  - fix(nfs): set correct ownership and permissions for statd directory
  - fix(resume): do not include resume if swap is on netdevice
  - feat(dracut-init.sh): give --force-add precedence over --omit
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(fips): include fips module unconditionally
  - fix(nfs): include also entries from /usr/lib/{passwd,group}
  - fix(dracut-functions): avoid awk in get_maj_min()
    Resolves: RHEL-39404,RHEL-47145,RHEL-53350,RHEL-53361,RHEL-53431,RHEL-53791,RHEL-54650


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Resolves: RHEL-65061
  - Resolves: RHEL-57504
  - Resolves: RHEL-57492
  - Resolves: RHEL-56750


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John Kacur <jkacur@redhat.com> - 0.19-7
changelog:
  - Add missing patch to prevents tuna gui from starting if display not available
  - remove oscilloscope which is unsupported in rhel
  - Add rpmsinpect.yaml and gating.yaml
  - Add tests dir
  - update the current version of python-linux-procfs as a requires
  Resolves: RHEL-30171


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Packit <hello@packit.dev> - 2.17.11-1
changelog:
  - Release version 2.17.11 (Michal Srb)
  - spec: Add missing requires for python3-libreport (Michal Srb)
  - Build URL with urllib.parse.urljoin() (Michal Srb)
  - Add XDG_ACTIVATION_TOKEN to the list of ignored words (Michal Srb)
  - Attachments are minor updates in Bugzilla (Michal Srb)
  - Retry Bugzilla search queries with delays (Michal Srb)
  - Fix "NameError: name 'ticket' is not defined" exception (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-1.el10]
changelog:
  - Add requirement on kernel-modules-extra (Phil Sutter) [RHEL-65224]
  - Rebase onto upstream version 1.8.11 (Phil Sutter) [RHEL-66725]


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update to upstream 20240115
  - Split out Intel/Cirrus audio firmware, ISP firmware, NXP/TI WiFi Firmware
  - Intel Bluetooth: Update firmware file for AX101/AX203/AX210/AX211
  - Cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - Cirrus: Add firmware for CS35L41 for various Dell laptops
  - update firmware for qat_4xxx devices
  - update firmware for w1u_uart
  - Cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312/DCN314
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - Add firmware for Mediatek WiFi/bluetooth chip (MT7925)
  - ASoC: tas2781/tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ath11k: Updates for WCN6855/WCN6750/IPQ8074
  - ath10k: Updates to WCN3990/QCA9888/QCA4019/QCA6174
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - Cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022/2023 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8550/SM8650 QRD


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240624-4
changelog:
  - linux-firmware ships encrypted zip files (named *.ncf) [rhel-10.0.beta] (RHEL-32183)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  Resolves: RHEL-32183


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240910-6
changelog:
  - linux-firmware broken links (RHEL-45213)
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54251)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54236)
  - SMM Lock Bypass (RHEL-55299)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - realtek: rt1320: Add patch firmware of MCU
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  Resolves: RHEL-45213, RHEL-54251, RHEL-54236, RHEL-55299


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241029-8
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update LNL GSC to v104.0.0.1263
  - i915: Update MTL/ARL GSC to v102.1.15.1926
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - i915: Add Xe3LPD DMC
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add firmware for Cirrus CS35L41
  - linux-firmware: Update firmware file for Intel BlazarU core
  - Makefile: error out of 'install' if COPYOPTS is set
  - check_whence.py: skip some validation if git ls-files fails
  - qcom: Add Audio firmware for X1E80100 CRD/QCPs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - brcm: replace NVRAM for Jetson TX1
  - rtlwifi: Update firmware for RTL8192FU to v7.3
  - make: separate installation and de-duplication targets
  - check_whence.py: check the permissions
  - Remove execute bit from firmware files
  - configure: remove unused file
  - rtl_nic: add firmware rtl8125d-1
  - iwlwifi: add gl/Bz FW for core91-69 release
  - iwlwifi: update ty/So/Ma firmwares for core91-69 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into wcn785x
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: add board-2.bin
  - copy-firmware.sh: rename variables in symlink hanlding
  - copy-firmware.sh: remove no longer reachable test -L
  - copy-firmware.sh: remove no longer reachable test -f
  - copy-firmware.sh: call ./check_whence.py before parsing the file
  - copy-firmware.sh: warn if the destination folder is not empty
  - copy-firmware.sh: add err() helper
  - copy-firmware.sh: fix indentation
  - copy-firmware.sh: reset and consistently handle destdir
  - Revert "copy-firmware: Support additional compressor options"
  - copy-firmware.sh: flesh out and fix dedup-firmware.sh
  - Style update yaml files
  - editorconfig: add initial config file
  - check_whence.py: annotate replacement strings as raw
  - check_whence.py: LC_ALL=C sort -u the filelist
  - check_whence.py: ban link-to-a-link
  - check_whence.py: use consistent naming
  - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin
  - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31
  - rtlwifi: Add firmware v39.0 for RTL8192DU
  - Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
  - QCA: Add Bluetooth firmwares for WCN785x with UART transport
  - amdgpu: DMCUB DCN35 update
  - brcm: Add BCM4354 NVRAM for Jetson TX1
  - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
  - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
  - linux-firmware: add firmware for MT7920
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - qcom: update gpu firmwares for qcm6490 chipset
  - mt76: mt7996: add firmware files for mt7992 chipset
  - mt76: mt7996: add firmware files for mt7996 chipset variants
  - qcom: add gpu firmwares for sa8775p chipset
  - amdgpu: update DMCUB to v0.0.233.0 DCN351
  - rtw89: 8922a: add fw format-2 v0.35.42.1
  - copy-firmware: Handle links to uncompressed files
  - WHENCE: Fix battmgr.jsn entry type
  - amdgpu: Add VPE 6.1.3 microcode
  - amdgpu: add SDMA 6.1.2 microcode
  - amdgpu: Add support for PSP 14.0.4
  - amdgpu: add GC 11.5.2 microcode
  - qcom: qcm6490: add ADSP and CDSP firmware
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-57
changelog:
  - Update to upstream 2.1-41. 20230808
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from
      revision 0x2006f05 up to 0x2007006;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xaa up to 0xac;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
      up to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf2 up to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xf6 up to 0xf8;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
      revision 0xf2 up to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
      up to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).
  - Addresses CVE-2022-21216, CVE-2022-40982, CVE-2022-41804, CVE-2023-23908


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-58
changelog:
  - Update to upstream 2.1-42. 20231114
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xac up to 0xb4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode from revision 0x2e
      up to 0x32.
  - Addresses CVE-2023-23583


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
  - Addresses CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.4-1
changelog:
  - Confine libvirt-dbus
  Resolves: RHEL-37822
  - Allow sssd create and use io_uring
  Resolves: RHEL-43448
  - Allow virtqemud the kill capability in user namespace
  Resolves: RHEL-44996
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-44191
  - Allow virtqemud read vm sysctls
  Resolves: RHEL-40938
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-40938
  - Allow rshim get options of the netlink class for KOBJECT_UEVENT family
  Resolves: RHEL-40859
  - Allow systemd-hostnamed read the vsock device
  Resolves: RHEL-45309
  - Allow systemd (PID 1) manage systemd conf files
  Resolves: RHEL-45304
  - Allow journald read systemd config files and directories
  Resolves: RHEL-45304
  - Allow systemd_domain read systemd_conf_t dirs
  Resolves: RHEL-45304
  - Label systemd configuration files with systemd_conf_t
  Resolves: RHEL-45304
  - Allow dhcpcd the kill capability
  Resolves: RHEL-43417
  - Add support for libvirt hooks
  Resolves: RHEL-41168


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
changelog:
  - Allow to create and delete socket files created by rhsm.service
  Resolves: RHEL-40857
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-40350
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  Resolves: RHEL-37822
  - Allow virtqemud read virt-dbus process state
  Resolves: RHEL-37822
  - Allow virtqemud run ssh client with a transition
  Resolves: RHEL-43215
  - Allow virtnetworkd exec shell when virt_hooks_unconfined is on
  Resolves: RHEL-41168
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-46717
  - Update keyutils policy
  Resolves: RHEL-38920
  - Allow ip the setexec permission
  Resolves: RHEL-41182


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.6-1
changelog:
  - Allow virtnodedevd run udev with a domain transition
  Resolves: RHEL-39890
  - Allow virtnodedev_t create and use virtnodedev_lock_t
  Resolves: RHEL-39890
  - Allow svirt attach_queue to a virtqemud tun_socket
  Resolves: RHEL-44312
  - Label /run/systemd/machine with systemd_machined_var_run_t
  Resolves: RHEL-49567
  - Allow to create and delete socket files created by rhsm.service


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.7-1
changelog:
  - Add the swtpm.if interface file for interactions with other domains
  Resolves: RHEL-47274
  - Allow virtproxyd create and use its private tmp files
  Resolves: RHEL-40499
  - Allow virtproxyd read network state
  Resolves: RHEL-40499
  - Allow virtqemud domain transition on swtpm execution
  Resolves: RHEL-47274
  Resolves: RHEL-49763
  - Allow virtqemud relabel virt_var_run_t directories
  Resolves: RHEL-47274
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow virtqemud domain transition on passt execution
  Resolves: RHEL-45464
  - Allow virt_driver_domain create and use log files in /var/log
  Resolves: RHEL-40239
  - Allow virt_driver_domain connect to systemd-userdbd over a unix socket
  Resolves: RHEL-44932
  Resolves: RHEL-44898
  - Update stalld policy for bpf usage
  Resolves: RHEL-50356
  - Allow boothd connect to systemd-userdbd over a unix socket
  Resolves: RHEL-45907
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  Resolves: RHEL-46011
  - Allow systemd-machined manage runtime sockets
  Resolves: RHEL-49567
  - Allow ip command write to ipsec's logs
  Resolves: RHEL-41222
  - Allow init_t nnp domain transition to firewalld_t
  Resolves: RHEL-52481
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-50377
  - Allow postfix_domain map postfix_etc_t files
  Resolves: RHEL-46327


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.8-1
changelog:
  - Add virt_create_log() and virt_write_log() interfaces
  Resolves: RHEL-47274
  - Update libvirt policy
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow svirt_tcg_t map svirt_image_t files
  Resolves: RHEL-47274
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-47274
  - Additional updates stalld policy for bpf usage
  Resolves: RHEL-50356


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.9-1
changelog:
  - Allow virtqemud relabelfrom also for file and sock_file
  Resolves: RHEL-49763
  - Allow virtqemud relabel user tmp files and socket files
  Resolves: RHEL-49763
  - Update virtqemud policy for libguestfs usage
  Resolves: RHEL-49763
  - Label /run/libvirt/qemu/channel with virtqemud_var_run_t
  Resolves: RHEL-47274


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.10-1
changelog:
  - Confine gnome-remote-desktop
  Resolves: RHEL-35877
  - Allow virtqemud get attributes of a tmpfs filesystem
  Resolves: RHEL-40855
  - Allow virtqemud get attributes of cifs files
  Resolves: RHEL-40855
  - Allow virtqemud get attributes of filesystems with extended attributes
  Resolves: RHEL-39668
  - Allow virtqemud get attributes of NFS filesystems
  Resolves: RHEL-40855
  - Add support for secretmem anon inode
  Resolves: RHEL-40953
  - Allow systemd-sleep read raw disk data
  Resolves: RHEL-49600
  - Allow systemd-hwdb send messages to kernel unix datagram sockets
  Resolves: RHEL-50810
  - Label /run/modprobe.d with modules_conf_t
  Resolves: RHEL-54591
  - Allow setsebool_t relabel selinux data files
  Resolves: RHEL-55412
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-56349
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-56349
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-56349
  - Add crontab_domtrans interface
  Resolves: RHEL-56349
  - Allow boothd connect to kernel over a unix socket
  Resolves: RHEL-58060
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-58068
  - systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
  Resolves: RHEL-58072
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-40961
  - Label /dev/mmcblk0rpmb character device with removable_device_t
  Resolves: RHEL-55265
  - Label /dev/hfi1_[0-9]+ devices
  Resolves: RHEL-62836
  - Label /dev/papr-sysparm and /dev/papr-vpd
  Resolves: RHEL-56908
  - Support SGX devices
  Resolves: RHEL-62354
  - Suppress semodule's stderr
  Resolves: RHEL-59192


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.11-1
changelog:
  - Allow ping_t read network sysctls
  Resolves: RHEL-54299
  - Label /usr/lib/node_modules/npm/bin with bin_t
  Resolves: RHEL-56350
  - Label /run/sssd with sssd_var_run_t
  Resolves: RHEL-57065
  - Allow virtqemud read virtd_t files
  Resolves: RHEL-57713
  - Allow wdmd read hardware state information
  Resolves: RHEL-57982
  - Allow wdmd list the contents of the sysfs directories
  Resolves: RHEL-57982
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  Resolves: RHEL-58380
  - Allow dirsrv read network sysctls
  Resolves: RHEL-58381
  - Allow lldpad create and use netlink_generic_socket
  Resolves: RHEL-61634
  - Allow unconfined_t execute kmod in the kmod domain
  Resolves: RHEL-61755
  - Confine the pcm service
  Resolves: RHEL-52838
  - Allow iio-sensor-proxy the bpf capability
  Resolves: RHEL-62355
  - Confine iio-sensor-proxy
  Resolves: RHEL-62355


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.12-1
changelog:
  - Dontaudit subscription manager setfscreate and read file contexts
  Resolves: RHEL-58009
  - Allow the sysadm user use the secretmem API
  Resolves: RHEL-40953
  - Allow sudodomain list files in /var
  Resolves: RHEL-58068
  - Allow gnome-remote-desktop watch /etc directory
  Resolves: RHEL-35877
  - Allow journalctl connect to systemd-userdbd over a unix socket
  Resolves: RHEL-58072
  - systemd: allow sys_admin capability for systemd_notify_t
  Resolves: RHEL-58072
  - Allow some confined users send to lldpad over a unix dgram socket
  Resolves: RHEL-61634
  - Allow lldpad send to sysadm_t over a unix dgram socket
  Resolves: RHEL-61634
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-61634


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Release Engineering <releng@rockylinux.org> - 2.12-1
changelog:
  - Replace sbat with Rocky Linux sbat (label)
  - Change bug tracker URL (label)
  - Add missing riscv64 support (label)


author: Jan Stancek <jstancek@redhat.com> [6.11.0-26.el10]
changelog:
  - redhat: drop ARK changelog (Jan Stancek) [RHEL-56700]
  - redhat: regenerate test-data (Jan Stancek) [RHEL-56700]
  - redhat: rpminspect.yaml: more tests to ignore in selftests (Jan Stancek) [RHEL-56700]
  - redhat/Makefile.variables: don't set DISTRO (Jan Stancek) [RHEL-56700]
  - redhat/Makefile.variables: set PATCHLIST_URL to none (Jan Stancek) [RHEL-56700]
  - redhat: gitlab-ci: add initial version (Jan Stancek) [RHEL-56700]
  - redhat: update rpminspect with c9s one (Jan Stancek) [RHEL-56700]
  - redhat: remove fedora configs and files (Jan Stancek) [RHEL-56700]
  - redhat: init RHEL10.0 beta variables and dist tag (Jan Stancek) [RHEL-56700]
  - redhat: set release version (Jan Stancek) [RHEL-56700]
  - redhat: fix CONFIG_PREEMPT config (Jan Stancek) [RHEL-56700]
  - KVM: selftests: Fix build on on non-x86 architectures (Mark Brown)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (Oliver Upton)
  - KVM: arm64: vgic: Don't check for vgic_ready() when setting NR_IRQS (Oliver Upton)
  - KVM: arm64: Fix shift-out-of-bounds bug (Ilkka Koskinen)
  - KVM: arm64: Shave a few bytes from the EL2 idmap code (Marc Zyngier)
  - KVM: arm64: Don't eagerly teardown the vgic on init error (Marc Zyngier)
  - KVM: arm64: Expose S1PIE to guests (Mark Brown)
  - KVM: arm64: nv: Clarify safety of allowing TLBI unmaps to reschedule (Oliver Upton)
  - KVM: arm64: nv: Punt stage-2 recycling to a vCPU request (Oliver Upton)
  - KVM: arm64: nv: Do not block when unmapping stage-2 if disallowed (Oliver Upton)
  - KVM: arm64: nv: Keep reference on stage-2 MMU when scheduled out (Oliver Upton)
  - KVM: arm64: Unregister redistributor for failed vCPU creation (Oliver Upton)
  - KVM: selftests: aarch64: Add writable test for ID_AA64PFR1_EL1 (Shaoqin Huang)
  - KVM: arm64: Allow userspace to change ID_AA64PFR1_EL1 (Shaoqin Huang)
  - KVM: arm64: Use kvm_has_feat() to check if FEAT_SSBS is advertised to the guest (Shaoqin Huang)
  - KVM: arm64: Disable fields that KVM doesn't know how to handle in ID_AA64PFR1_EL1 (Shaoqin Huang)
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (Shameer Kolothum)
  - RISCV: KVM: use raw_spinlock for critical section in imsic (Cyan Yang)
  - KVM: selftests: Fix out-of-bounds reads in CPUID test's array lookups (Sean Christopherson)
  - KVM: selftests: x86: Avoid using SSE/AVX instructions (Vitaly Kuznetsov)
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson)
  - KVM: VMX: reset the segment cache after segment init in vmx_vcpu_reset() (Maxim Levitsky)
  - KVM: x86: Clean up documentation for KVM_X86_QUIRK_SLOT_ZAP_ALL (Sean Christopherson)
  - KVM: x86/mmu: Add lockdep assert to enforce safe usage of kvm_unmap_gfn_range() (Sean Christopherson)
  - KVM: x86/mmu: Zap only SPs that shadow gPTEs when deleting memslot (Sean Christopherson)
  - x86/kvm: Override default caching mode for SEV-SNP and TDX (Kirill A. Shutemov)
  - KVM: Remove unused kvm_vcpu_gfn_to_pfn_atomic (Dr. David Alan Gilbert)
  - KVM: Remove unused kvm_vcpu_gfn_to_pfn (Dr. David Alan Gilbert)
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma)
  - proc: Fix W=1 build kernel-doc warning (Thorsten Blum)
  - afs: Fix lock recursion (David Howells)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)
  - fs: don't try and remove empty rbtree node (Christian Brauner)
  - netfs: Downgrade i_rwsem for a buffered write (David Howells)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi)
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
  - netfs: fix documentation build error (Jonathan Corbet)
  - netfs: In readahead, put the folio refs as soon extracted (David Howells)
  - crypto: lib/mpi - Fix an "Uninitialized scalar variable" issue (Qianqiang Liu)
  - Revert "Merge branch 'enablement/gpio-expander' into 'os-build'" (Justin M. Forbes)
  - v6.12-rc2-rt4 (Sebastian Andrzej Siewior)
  - sched: Replace PREEMPT_AUTO with LAZY_PREEMPT. (Sebastian Andrzej Siewior)
  - softirq: Clean white space. (Sebastian Andrzej Siewior)
  - mm: percpu: Increase PERCPU_DYNAMIC_SIZE_SHIFT on certain builds. (Sebastian Andrzej Siewior)
  - ARM: vfp: Rename the locking functions. (Sebastian Andrzej Siewior)
  - v6.12-rc2-rt3 (Sebastian Andrzej Siewior)
  - v6.12-rc1-rt2 (Sebastian Andrzej Siewior)
  - Revert "time: Allow to preempt after a callback." + dependencies. (Sebastian Andrzej Siewior)
  - Revert "sched/rt: Don't try push tasks if there are none." (Sebastian Andrzej Siewior)
  - Add localversion for -RT release (Thomas Gleixner)
  - sysfs: Add /sys/kernel/realtime entry (Clark Williams)
  - riscv: add PREEMPT_AUTO support (Jisheng Zhang)
  - POWERPC: Allow to enable RT (Sebastian Andrzej Siewior)
  - powerpc/stackprotector: work around stack-guard init from atomic (Sebastian Andrzej Siewior)
  - powerpc/kvm: Disable in-kernel MPIC emulation for PREEMPT_RT (Bogdan Purcareata)
  - powerpc/pseries: Select the generic memory allocator. (Sebastian Andrzej Siewior)
  - powerpc/pseries/iommu: Use a locallock instead local_irq_save() (Sebastian Andrzej Siewior)
  - powerpc: traps: Use PREEMPT_RT (Sebastian Andrzej Siewior)
  - ARM: Allow to enable RT (Sebastian Andrzej Siewior)
  - ARM: vfp: Move sending signals outside of vfp_lock()ed section. (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_support_entry(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_sync_hwstate(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Provide vfp_lock() for VFP locking. (Sebastian Andrzej Siewior)
  - arm: Disable FAST_GUP on PREEMPT_RT if HIGHPTE is also enabled. (Sebastian Andrzej Siewior)
  - ARM: enable irq in translation/section permission fault handlers (Yadi.hu)
  - arm: Disable jump-label on PREEMPT_RT. (Thomas Gleixner)
  - sched: define TIF_ALLOW_RESCHED (Thomas Gleixner)
  - Revert "drm/i915: Depend on !PREEMPT_RT." (Sebastian Andrzej Siewior)
  - drm/i915/guc: Consider also RCU depth in busy loop. (Sebastian Andrzej Siewior)
  - drm/i915: Drop the irqs_disabled() check (Sebastian Andrzej Siewior)
  - drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() + spin_lock() (Sebastian Andrzej Siewior)
  - drm/i915: Disable tracing points on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't check for atomic context on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't disable interrupts on PREEMPT_RT during atomic updates (Mike Galbraith)
  - drm/i915: Use preempt_disable/enable_rt() where recommended (Mike Galbraith)
  - time: Allow to preempt after a callback. (Sebastian Andrzej Siewior)
  - softirq: Add function to preempt serving softirqs. (Sebastian Andrzej Siewior)
  - sched/core: Provide a method to check if a task is PI-boosted. (Sebastian Andrzej Siewior)
  - softirq: Wake ktimers thread also in softirq. (Junxiao Chang)
  - tick: Fix timer storm since introduction of timersd (Frederic Weisbecker)
  - rcutorture: Also force sched priority to timersd on boosting test. (Frederic Weisbecker)
  - softirq: Use a dedicated thread for timer wakeups. (Sebastian Andrzej Siewior)
  - locking/rt: Annotate unlock followed by lock for sparse. (Sebastian Andrzej Siewior)
  - locking/rt: Add sparse annotation for RCU. (Sebastian Andrzej Siewior)
  - locking/rt: Remove one __cond_lock() in RT's spin_trylock_irqsave() (Sebastian Andrzej Siewior)
  - locking/rt: Add sparse annotation PREEMPT_RT's sleeping locks. (Sebastian Andrzej Siewior)
  - sched/rt: Don't try push tasks if there are none. (Sebastian Andrzej Siewior)
  - serial: 8250: Revert "drop lockdep annotation from serial8250_clear_IER()" (John Ogness)
  - serial: 8250: Switch to nbcon console (John Ogness)
  - Linux v6.12-rc4


author: Jan Stancek <jstancek@redhat.com> [6.11.0-27.el10]
changelog:
  - Linux 6.12-rc5 (Linus Torvalds)
  - x86/sev: Ensure that RMP table fixups are reserved (Ashish Kalra)
  - x86/microcode/AMD: Split load_microcode_amd() (Borislav Petkov (AMD))
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Borislav Petkov (AMD))
  - x86/lam: Disable ADDRESS_MASKING in most cases (Pawan Gupta)
  - fgraph: Change the name of cpuhp state to "fgraph:online" (Steven Rostedt)
  - fgraph: Fix missing unlock in register_ftrace_graph() (Li Huafei)
  - platform/x86: asus-wmi: Fix thermal profile initialization (Armin Wolf)
  - platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
  - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses (Vamsi Krishna Brahmajosyula)
  - platform/x86:intel/pmc: Revert "Enable the ACPI PM Timer to be turned off when suspended" (Marek Maslanka)
  - firewire: core: fix invalid port index for parent device (Takashi Sakamoto)
  - block: fix sanity checks in blk_rq_map_user_bvec (Xinyu Zhang)
  - md/raid10: fix null ptr dereference in raid10_size() (Yu Kuai)
  - md: ensure child flush IO does not affect origin bio->bi_status (Li Nan)
  - xfs: update the pag for the last AG at recovery time (Christoph Hellwig)
  - xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag (Christoph Hellwig)
  - xfs: error out when a superblock buffer update reduces the agcount (Christoph Hellwig)
  - xfs: update the file system geometry after recoverying superblock buffers (Christoph Hellwig)
  - xfs: merge the perag freeing helpers (Christoph Hellwig)
  - xfs: pass the exact range to initialize to xfs_initialize_perag (Christoph Hellwig)
  - xfs: don't fail repairs on metadata files with no attr fork (Darrick J. Wong)
  - generic: enable RPMB for all configs that enable MMC (Peter Robinson)
  - fedora: riscv: Don't override MMC platform defaults (Peter Robinson)
  - common: only enable on MMC_DW_BLUEFIELD (Peter Robinson)
  - fedora: aarch64: Stop overriding CONFIG_MMC defaults (Peter Robinson)
  - commong: The KS7010 driver has been removed (Peter Robinson)
  - Revert "fs/9p: simplify iget to remove unnecessary paths" (Dominique Martinet)
  - Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl" (Dominique Martinet)
  - Revert "fs/9p: remove redundant pointer v9ses" (Dominique Martinet)
  - Revert " fs/9p: mitigate inode collisions" (Dominique Martinet)
  - cifs: fix warning when destroy 'cifs_io_request_pool' (Ye Bin)
  - smb: client: Handle kstrdup failures for passwords (Henrique Carvalho)
  - fuse: remove stray debug line (Miklos Szeredi)
  - Revert "fuse: move initialization of fuse_file to fuse_writepages() instead of in callback" (Miklos Szeredi)
  - fuse: update inode size after extending passthrough write (Amir Goldstein)
  - fs: pass offset and result to backing_file end_write() callback (Amir Goldstein)
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)
  - nfsd: fix race between laundromat and free_stateid (Olga Kornievskaia)
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko)
  - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request() (Yuan Can)
  - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception (liwei)
  - cpufreq: docs: Reflect latency changes in docs (Christian Loehle)
  - PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees (Bartosz Golaszewski)
  - PCI: Hold rescan lock while adding devices during host probe (Bartosz Golaszewski)
  - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS (Arnd Bergmann)
  - fbdev: da8xx: remove the driver (Bartosz Golaszewski)
  - fbdev: Constify struct sbus_mmap_map (Christophe JAILLET)
  - fbdev: nvidiafb: fix inconsistent indentation warning (SurajSonawane2415)
  - fbdev: sstfb: Make CONFIG_FB_DEVICE optional (Gonzalo Silvalde Blanco)
  - MAINTAINERS: add a keyword entry for the GPIO subsystem (Bartosz Golaszewski)
  - ata: libata: Set DID_TIME_OUT for commands that actually timed out (Niklas Cassel)
  - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc (Krzysztof Kozlowski)
  - ASoC: fsl_micfil: Add sample rate constraint (Shengjiu Wang)
  - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (Jack Yu)
  - ASoC: SOF: Intel: hda: Always clean up link DMA during stop (Ranjani Sridharan)
  - soundwire: intel_ace2x: Send PDI stream number during prepare (Ranjani Sridharan)
  - ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's (Ranjani Sridharan)
  - ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs (Ranjani Sridharan)
  - ASoC: fsl_micfil: Add a flag to distinguish with different volume control types (Chancel Liu)
  - ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs (Alexey Klimov)
  - ASoC: Change my e-mail to gmail (Kirill Marinushkin)
  - ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops (Derek Fang)
  - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (Ilya Dudikov)
  - MAINTAINERS: Update maintainer list for MICROCHIP ASOC, SSC and MCP16502 drivers (Andrei Simion)
  - ASoC: qcom: Select missing common Soundwire module code on SDM845 (Krzysztof Kozlowski)
  - ASoC: fsl_esai: change dev_warn to dev_dbg in irq handler (Shengjiu Wang)
  - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing (Lad Prabhakar)
  - ASoC: max98388: Fix missing increment of variable slot_found (Colin Ian King)
  - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (Christian Heusel)
  - ASoC: topology: Bump minimal topology ABI version (Amadeusz Sławiński)
  - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function (Zhu Jun)
  - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc (Alexey Klimov)
  - ASoC: loongson: Fix component check failed on FDT systems (Binbin Zhou)
  - ASoC: dapm: avoid container_of() to get component (Benjamin Bara)
  - ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC (Kai Vehmanen)
  - ASoC: SOF: amd: Fix for ACP SRAM addr for acp7.0 platform (Venkata Prasad Potturu)
  - ASoC: SOF: amd: Add error log for DSP firmware validation failure (Venkata Prasad Potturu)
  - ASoC: Intel: avs: Update stream status in a separate thread (Amadeusz Sławiński)
  - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties (Miquel Raynal)
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie)
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
  - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (Eric Biggers)
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin)
  - drm/xe: Don't restart parallel queues multiple times on GT reset (Nirmoy Das)
  - drm/xe/ufence: Prefetch ufence addr to catch bogus address (Nirmoy Das)
  - drm/xe: Handle unreliable MMIO reads during forcewake (Shuicheng Lin)
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (Badal Nilawar)
  - drm/xe: Enlarge the invalidation timeout from 150 to 500 (Shuicheng Lin)
  - drm/bridge: tc358767: fix missing of_node_put() in for_each_endpoint_of_node() (Javier Carrasco)
  - drm/bridge: Fix assignment of the of_node of the parent to aux bridge (Abel Vesa)
  - i915: fix DRM_I915_GVT_KVMGT dependencies (Arnd Bergmann)
  - drm/amdgpu: handle default profile on on devices without fullscreen 3D (Alex Deucher)
  - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (Mario Limonciello)
  - drm/amdgpu: fix random data corruption for sdma 7 (Frank Min)
  - drm/amd/display: temp w/a for DP Link Layer compliance (Aurabindo Pillai)
  - drm/amd/display: temp w/a for dGPU to enter idle optimizations (Aurabindo Pillai)
  - drm/amd/pm: update deep sleep status on smu v14.0.2/3 (Kenneth Feng)
  - drm/amd/pm: update overdrive function on smu v14.0.2/3 (Kenneth Feng)
  - drm/amd/pm: update the driver-fw interface file for smu v14.0.2/3 (Kenneth Feng)
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello)
  - x86: fix whitespace in runtime-const assembler output (Linus Torvalds)
  - x86: fix user address masking non-canonical speculation issue (Linus Torvalds)
  - v6.12-rc4-rt6 (Sebastian Andrzej Siewior)
  - sched: Update the lazy-preempt bits. (Sebastian Andrzej Siewior)
  - timer: Update the ktimersd series. (Sebastian Andrzej Siewior)
  - v6.12-rc4-rt5 (Sebastian Andrzej Siewior)
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao)
  - bpf: Add the missing BPF_LINK_TYPE invocation for sockmap (Hou Tao)
  - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot() (Andrii Nakryiko)
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
  - selftests/bpf: Add test for passing in uninit mtu_len (Daniel Borkmann)
  - selftests/bpf: Add test for writes to .rodata (Daniel Borkmann)
  - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers (Daniel Borkmann)
  - bpf: Fix overloading of MEM_UNINIT's meaning (Daniel Borkmann)
  - bpf: Add MEM_WRITE attribute (Daniel Borkmann)
  - bpf: Preserve param->string when parsing mount options (Hou Tao)
  - bpf, arm64: Fix address emission with tag-based KASAN enabled (Peter Collingbourne)
  - net: dsa: mv88e6xxx: support 4000ps cycle counter period (Shenghao Yang)
  - net: dsa: mv88e6xxx: read cycle counter period from hardware (Shenghao Yang)
  - net: dsa: mv88e6xxx: group cycle counter coefficients (Shenghao Yang)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
  - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x (Tim Harvey)
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (Luiz Augusto von Dentz)
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz)
  - Bluetooth: hci_core: Disable works on hci_unregister_dev (Luiz Augusto von Dentz)
  - xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov)
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca)
  - xfrm: policy: remove last remnants of pernet inexact list (Florian Westphal)
  - xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
  - xfrm: extract dst lookup parameters into a struct (Eyal Birger)
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan)
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)
  - net: sched: use RCU read-side critical section in taprio_dump() (Dmitry Antipov)
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov)
  - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers (Vladimir Oltean)
  - net: usb: usbnet: fix name regression (Oliver Neukum)
  - mlxsw: spectrum_router: fix xa_store() error checking (Yuan Can)
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
  - netfilter: bpf: must hold reference on net namespace (Florian Westphal)
  - virtio_net: fix integer overflow in stats (Michael S. Tsirkin)
  - net: fix races in netdev_tx_sent_queue()/dev_watchdog() (Eric Dumazet)
  - net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma)
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin)
  - fsl/fman: Save device references taken in mac_probe() (Aleksandr Mishin)
  - MAINTAINERS: add samples/pktgen to NETWORKING [GENERAL] (Hangbin Liu)
  - mailmap: update entry for Jesper Dangaard Brouer (Jesper Dangaard Brouer)
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
  - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (Aleksandr Mishin)
  - octeon_ep: Implement helper for iterating packets in Rx queue (Aleksandr Mishin)
  - bnxt_en: replace ptp_lock with irqsave variant (Vadim Fedorenko)
  - net: phy: dp83822: Fix reset pin definitions (Michel Alex)
  - MAINTAINERS: add Simon as an official reviewer (Jakub Kicinski)
  - net: plip: fix break; causing plip to never transmit (Jakub Boehm)
  - be2net: fix potential memory leak in be_xmit() (Wang Hai)
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai)
  - net: pse-pd: Fix out of bound for loop (Kory Maincent)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad (Bartłomiej Maryńczak)
  - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context (Huacai Chen)
  - LoongArch: Make KASAN usable for variable cpu_vabits (Huacai Chen)
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space (Bibo Mao)
  - LoongArch: Don't crash in stack_top() for tasks without vDSO (Thomas Weißschuh)
  - LoongArch: Set correct size for vDSO code mapping (Huacai Chen)
  - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (Huacai Chen)
  - LoongArch: Get correct cores_per_package for SMT systems (Huacai Chen)
  - LoongArch: Use "Exception return address" to comment ERA (Yanteng Si)
  - tracing: Consider the NULL character when validating the event length (Leo Yan)
  - tracing/probes: Fix MAX_TRACE_ARGS limit handling (Mikel Rychliski)
  - objpool: fix choosing allocation for percpu slots (Viktor Malik)
  - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item() (Yue Haibing)
  - btrfs: reject ro->rw reconfiguration if there are hard ro requirements (Qu Wenruo)
  - btrfs: fix read corruption due to race with extent map merging (Boris Burkov)
  - btrfs: fix the delalloc range locking if sector size < page size (Qu Wenruo)
  - btrfs: qgroup: set a more sane default value for subtree drop threshold (Qu Wenruo)
  - btrfs: clear force-compress on remount when compress mount option is given (Filipe Manana)
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)
  - bcachefs: Set bch_inode_unpacked.bi_snapshot in old inode path (Kent Overstreet)
  - bcachefs: Mark more errors as AUTOFIX (Kent Overstreet)
  - bcachefs: Workaround for kvmalloc() not supporting > INT_MAX allocations (Kent Overstreet)
  - bcachefs: Don't use wait_event_interruptible() in recovery (Kent Overstreet)
  - bcachefs: Fix __bch2_fsck_err() warning (Kent Overstreet)
  - bcachefs: fsck: Improve hash_check_key() (Kent Overstreet)
  - bcachefs: bch2_hash_set_or_get_in_snapshot() (Kent Overstreet)
  - bcachefs: Repair mismatches in inode hash seed, type (Kent Overstreet)
  - bcachefs: Add hash seed, type to inode_to_text() (Kent Overstreet)
  - bcachefs: INODE_STR_HASH() for bch_inode_unpacked (Kent Overstreet)
  - bcachefs: Run in-kernel offline fsck without ratelimit errors (Kent Overstreet)
  - bcachefs: skip mount option handle for empty string. (Hongbo Li)
  - bcachefs: fix incorrect show_options results (Hongbo Li)
  - bcachefs: Fix data corruption on -ENOSPC in buffered write path (Kent Overstreet)
  - bcachefs: bch2_folio_reservation_get_partial() is now better behaved (Kent Overstreet)
  - bcachefs: fix disk reservation accounting in bch2_folio_reservation_get() (Kent Overstreet)
  - bcachefS: ec: fix data type on stripe deletion (Kent Overstreet)
  - bcachefs: Don't use commit_do() unnecessarily (Kent Overstreet)
  - bcachefs: handle restarts in bch2_bucket_io_time_reset() (Kent Overstreet)
  - bcachefs: fix restart handling in __bch2_resume_logged_op_finsert() (Kent Overstreet)
  - bcachefs: fix restart handling in bch2_alloc_write_key() (Kent Overstreet)
  - bcachefs: fix restart handling in bch2_do_invalidates_work() (Kent Overstreet)
  - bcachefs: fix missing restart handling in bch2_read_retry_nodecode() (Kent Overstreet)
  - bcachefs: fix restart handling in bch2_fiemap() (Kent Overstreet)
  - bcachefs: fix bch2_hash_delete() error path (Kent Overstreet)
  - bcachefs: fix restart handling in bch2_rename2() (Kent Overstreet)
  - Revert "9p: Enable multipage folios" (Dominique Martinet)
  - Trim Changelog for 6.12 (Justin M. Forbes)
  - Enable CONFIG_SECURITY_IPE for Fedora (Zbigniew Jędrzejewski-Szmek)
  - redhat: allow to override VERSION_ON_UPSTREAM from command line (Jan Stancek)
  - redhat: configs: Enable CONFIG_SECURITY_TOMOYO in Fedora kernels (Tetsuo Handa)


author: Jan Stancek <jstancek@redhat.com> [6.11.0-28.el10]
changelog:
  - Linux 6.12-rc6 (Linus Torvalds)
  - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() (Yu Zhao)
  - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats (Yu Zhao)
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Vlastimil Babka)
  - mm: shrinker: avoid memleak in alloc_shrinker_info (Chen Ridong)
  - .mailmap: update e-mail address for Eugen Hristev (Eugen Hristev)
  - vmscan,migrate: fix page count imbalance on node stats when demoting pages (Gregory Price)
  - mailmap: update Jarkko's email addresses (Jarkko Sakkinen)
  - mm: allow set/clear page_type again (Yu Zhao)
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi)
  - Squashfs: fix variable overflow in squashfs_readpage_block (Phillip Lougher)
  - kasan: remove vmalloc_percpu test (Andrey Konovalov)
  - tools/mm: -Werror fixes in page-types/slabinfo (Wladislav Wiebe)
  - mm, swap: avoid over reclaim of full clusters (Kairui Song)
  - mm: fix PSWPIN counter for large folios swap-in (Barry Song)
  - mm: avoid VM_BUG_ON when try to map an anon large folio to zero page. (Zi Yan)
  - mm/codetag: fix null pointer check logic for ref and tag (Hao Ge)
  - mm/gup: stop leaking pinned pages in low memory conditions (John Hubbard)
  - phy: tegra: xusb: Add error pointer check in xusb.c (Dipendra Khadka)
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Fix X1E80100 resets entries (Abel Vesa)
  - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (Richard Zhu)
  - phy: phy-rockchip-samsung-hdptx: Depend on CONFIG_COMMON_CLK (Cristian Ciocaltea)
  - phy: ti: phy-j721e-wiz: fix usxgmii configuration (Siddharth Vadapalli)
  - phy: starfive: jh7110-usb: Fix link configuration to controller (Jan Kiszka)
  - phy: qcom: qmp-pcie: drop bogus x1e80100 qref supplies (Johan Hovold)
  - phy: qcom: qmp-combo: move driver data initialisation earlier (Johan Hovold)
  - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend (Johan Hovold)
  - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend (Johan Hovold)
  - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (Johan Hovold)
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: add missing x1e80100 pipediv2 clocks (Johan Hovold)
  - phy: usb: disable COMMONONN for dual mode (Justin Chen)
  - phy: cadence: Sierra: Fix offset of DEQ open eye algorithm control register (Bartosz Wawrzyniak)
  - phy: usb: Fix missing elements in BCM4908 USB init array (Sam Edwards)
  - dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (Jai Luthra)
  - dmaengine: sh: rz-dmac: handle configs where one address is zero (Wolfram Sang)
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
  - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices (Amit Sunil Dhamne)
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
  - usb: typec: use cleanup facility for 'altmodes_node' (Javier Carrasco)
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
  - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path (Javier Carrasco)
  - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes (Javier Carrasco)
  - usb: acpi: fix boot hang due to early incorrect 'tunneled' USB3 device links (Mathias Nyman)
  - Revert "usb: dwc2: Skip clock gating on Broadcom SoCs" (Stefan Wahren)
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
  - thunderbolt: Honor TMU requirements in the domain when setting TMU mode (Gil Fine)
  - thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() (Mika Westerberg)
  - iio: dac: Kconfig: Fix build error for ltc2664 (Jinjie Ruan)
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu)
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu)
  - docs: iio: ad7380: fix supply for ad7380-4 (Julien Stephan)
  - iio: adc: ad7380: fix supplies for ad7380-4 (Julien Stephan)
  - iio: adc: ad7380: add missing supplies (Julien Stephan)
  - iio: adc: ad7380: use devm_regulator_get_enable_read_voltage() (Julien Stephan)
  - dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply (Julien Stephan)
  - iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
  - iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (Jinjie Ruan)
  - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (Jinjie Ruan)
  - mei: use kvmalloc for read buffer (Alexander Usyskin)
  - MAINTAINERS: add netup_unidvb maintainer (Abylay Ospan)
  - Input: fix regression when re-registering input handlers (Dmitry Torokhov)
  - Input: adp5588-keys - do not try to disable interrupt 0 (Dmitry Torokhov)
  - Input: edt-ft5x06 - fix regmap leak when probe fails (Dmitry Torokhov)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (Masahiro Yamada)
  - kconfig: show sub-menu entries even if the prompt is hidden (Masahiro Yamada)
  - kbuild: deb-pkg: add pkg.linux-upstream.nokerneldbg build profile (Masahiro Yamada)
  - kbuild: deb-pkg: add pkg.linux-upstream.nokernelheaders build profile (Masahiro Yamada)
  - kbuild: rpm-pkg: disable kernel-devel package when cross-compiling (Masahiro Yamada)
  - sumversion: Fix a memory leak in get_src_version() (Elena Salomatkina)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - sched/ext: Fix scx vs sched_delayed (Peter Zijlstra)
  - sched: Pass correct scheduling policy to __setscheduler_class (Aboorva Devarajan)
  - sched/numa: Fix the potential null pointer dereference in task_numa_work() (Shawn Wang)
  - sched: Fix pick_next_task_fair() vs try_to_wake_up() race (Peter Zijlstra)
  - perf: Fix missing RCU reader protection in perf_event_clear_cpumask() (Kan Liang)
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Marc Zyngier)
  - genirq/msi: Fix off-by-one error in msi_domain_alloc() (Jinjie Ruan)
  - redhat/configs: add bootconfig to kernel-tools package (Brian Masney)
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Zbigniew Jędrzejewski-Szmek) [RHEL-8810]
  - rpcrdma: Always release the rpcrdma_device's xa_array (Chuck Lever)
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever)
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)
  - xfs: streamline xfs_filestream_pick_ag (Christoph Hellwig)
  - xfs: fix finding a last resort AG in xfs_filestream_pick_ag (Christoph Hellwig)
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling)
  - xfs: Check for delayed allocations before setting extsize (Ojaswin Mujoo)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - selftests/intel_pstate: check if cpupower is installed (Alessandro Zanni)
  - selftests/intel_pstate: fix operand expected error (Alessandro Zanni)
  - selftests/mount_setattr: fix idmap_mount_tree_invalid failed to run (zhouyuhang)
  - cfi: tweak llvm version for HAVE_CFI_ICALL_NORMALIZE_INTEGERS (Alice Ryhl)
  - kbuild: rust: avoid errors with old `rustc`s without LLVM patch version (Miguel Ojeda)
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)
  - drm/xe: Don't short circuit TDR on jobs not started (Matthew Brost)
  - drm/xe: Add mmio read before GGTT invalidate (Matthew Brost)
  - drm/xe/display: Add missing HPD interrupt enabling during non-d3cold RPM resume (Imre Deak)
  - drm/xe/display: Separate the d3cold and non-d3cold runtime PM handling (Imre Deak)
  - drm/xe: Remove runtime argument from display s/r functions (Maarten Lankhorst)
  - dt-bindings: display: mediatek: split: add subschema property constraints (Moudy Ho)
  - dt-bindings: display: mediatek: dpi: correct power-domains property (Macpaul Lin)
  - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (Dan Carpenter)
  - drm/mediatek: Fix get efuse issue for MT8188 DPTX (Liankun Yang)
  - drm/mediatek: Fix color format MACROs in OVL (Hsin-Te Yuan)
  - drm/mediatek: Add blend_modes to mtk_plane_init() for different SoCs (Jason-JH.Lin)
  - drm/mediatek: ovl: Add blend_modes to driver data (Jason-JH.Lin)
  - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() (Jason-JH.Lin)
  - drm/mediatek: ovl: Refine ignore_pixel_alpha comment and placement (Jason-JH.Lin)
  - drm/mediatek: ovl: Fix XRGB format breakage for blend_modes unsupported SoCs (Jason-JH.Lin)
  - drm/amdgpu/smu13: fix profile reporting (Alex Deucher)
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (Tvrtko Ursulin)
  - Revert "drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35" (Ovidiu Bunea)
  - drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() (Jinjie Ruan)
  - drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() (Jinjie Ruan)
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() (Jinjie Ruan)
  - drm/panthor: Report group as timedout when we fail to properly suspend (Boris Brezillon)
  - drm/panthor: Fail job creation when the group is dead (Boris Brezillon)
  - drm/panthor: Fix firmware initialization on systems with a page size > 4k (Boris Brezillon)
  - accel/ivpu: Fix NOC firewall interrupt handling (Andrzej Kacprowski)
  - drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM (Matthew Brost)
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Dan Carpenter)
  - cxl/test: Improve init-order fidelity relative to real-world systems (Dan Williams)
  - cxl/port: Prevent out-of-order decoder allocation (Dan Williams)
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (Dan Williams)
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (Dan Williams)
  - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (Dan Williams)
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (Dan Williams)
  - cxl/events: Fix Trace DRAM Event Record (Shiju Jose)
  - cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (Li Zhijian)
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Keith Busch)
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov)
  - nvme: module parameter to disable pi with offsets (Keith Busch)
  - nvme: enhance cns version checking (Keith Busch)
  - block: fix queue limits checks in blk_rq_map_user_bvec for real (Christoph Hellwig)
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois)
  - gpiolib: fix debugfs dangling chip separator (Johan Hovold)
  - gpiolib: fix debugfs newline separators (Johan Hovold)
  - gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() call (Andy Shevchenko)
  - gpio: fix uninit-value in swnode_find_gpio (Suraj Sonawane)
  - riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
  - riscv: Remove duplicated GET_RM (Chunyan Zhang)
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
  - riscv: Use '%u' to format the output of 'cpu' (WangYuli)
  - riscv: Prevent a bad reference count on CPU nodes (Miquel Sabaté Solà)
  - riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
  - RISC-V: disallow gcc + rust builds (Conor Dooley)
  - riscv: Do not use fortify in early code (Alexandre Ghiti)
  - RISC-V: ACPI: fix early_ioremap to early_memremap (Yunhui Cui)
  - arm64: signal: Improve POR_EL0 handling to avoid uaccess failures (Kevin Brodsky)
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
  - Revert "kasan: Disable Software Tag-Based KASAN with GCC" (Marco Elver)
  - kasan: Fix Software Tag-Based KASAN with GCC (Marco Elver)
  - iomap: turn iomap_want_unshare_iter into an inline function (Christoph Hellwig)
  - fsdax: dax_unshare_iter needs to copy entire blocks (Darrick J. Wong)
  - fsdax: remove zeroing code from dax_unshare_iter (Darrick J. Wong)
  - iomap: share iomap_unshare_iter predicate code with fsdax (Darrick J. Wong)
  - xfs: don't allocate COW extents when unsharing a hole (Darrick J. Wong)
  - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP (Hugh Dickins)
  - autofs: fix thinko in validate_dev_ioctl() (Ian Kent)
  - iov_iter: Fix iov_iter_get_pages*() for folio_queue (David Howells)
  - afs: Fix missing subdir edit when renamed between parent dirs (David Howells)
  - doc: correcting the debug path for cachefiles (Hongbo Li)
  - erofs: use get_tree_bdev_flags() to avoid misleading messages (Gao Xiang)
  - fs/super.c: introduce get_tree_bdev_flags() (Gao Xiang)
  - btrfs: fix defrag not merging contiguous extents due to merged extent maps (Filipe Manana)
  - btrfs: fix extent map merging not happening for adjacent extents (Filipe Manana)
  - btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() (Zhihao Cheng)
  - btrfs: fix error propagation of split bios (Naohiro Aota)
  - MIPS: export __cmpxchg_small() (David Sterba)
  - bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek (Piotr Zalewski)
  - bcachefs: fix possible null-ptr-deref in __bch2_ec_stripe_head_get() (Gaosheng Cui)
  - bcachefs: Fix deadlock on -ENOSPC w.r.t. partial open buckets (Kent Overstreet)
  - bcachefs: Don't filter partial list buckets in open_buckets_to_text() (Kent Overstreet)
  - bcachefs: Don't keep tons of cached pointers around (Kent Overstreet)
  - bcachefs: init freespace inited bits to 0 in bch2_fs_initialize (Piotr Zalewski)
  - bcachefs: Fix unhandled transaction restart in fallocate (Kent Overstreet)
  - bcachefs: Fix UAF in bch2_reconstruct_alloc() (Kent Overstreet)
  - bcachefs: fix null-ptr-deref in have_stripes() (Jeongjun Park)
  - bcachefs: fix shift oob in alloc_lru_idx_fragmentation (Jeongjun Park)
  - bcachefs: Fix invalid shift in validate_sb_layout() (Gianfranco Trad)
  - RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
  - RDMA/bnxt_re: Fix the usage of control path spin locks (Selvin Xavier)
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
  - RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
  - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled (Toke Høiland-Jørgensen)
  - selftests/bpf: Add three test cases for bits_iter (Hou Tao)
  - bpf: Use __u64 to save the bits in bits iterator (Hou Tao)
  - bpf: Check the validity of nr_words in bpf_iter_bits_new() (Hou Tao)
  - bpf: Add bpf_mem_alloc_check_size() helper (Hou Tao)
  - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (Hou Tao)
  - bpf: disallow 40-bytes extra stack for bpf_fastcall patterns (Eduard Zingerman)
  - selftests/bpf: Add test for trie_get_next_key() (Byeonguk Jeong)
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong)
  - selftests/bpf: Test with a very short loop (Eduard Zingerman)
  - bpf: Force checkpoint when jmp history is too long (Eduard Zingerman)
  - bpf: fix filed access without lock (Jiayuan Chen)
  - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() (Cong Wang)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso)
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Eric Dumazet)
  - netfilter: Fix use-after-free in get_info() (Dong Chenchen)
  - selftests: netfilter: remove unused parameter (Liu Jing)
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (Sungwoo Kim)
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (Jie Wang)
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (Hao Lan)
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init() (Jian Shen)
  - net: hns3: don't auto enable misc vector (Jian Shen)
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent. (Hao Lan)
  - net: hns3: fix missing features due to dev->features configuration too early (Hao Lan)
  - net: hns3: fixed reset failure issues caused by the incorrect reset type (Hao Lan)
  - net: hns3: add sync command to sync io-pgtable (Jian Shen)
  - net: hns3: default enable tx bounce buffer when smmu enabled (Peiyang Wang)
  - net: ethernet: mtk_wed: fix path of MT7988 WO firmware (Daniel Golle)
  - selftests: forwarding: Add IPv6 GRE remote change tests (Ido Schimmel)
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ido Schimmel)
  - mlxsw: pci: Sync Rx buffers for device (Amit Cohen)
  - mlxsw: pci: Sync Rx buffers for CPU (Amit Cohen)
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Amit Cohen)
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
  - wifi: mac80211: ieee80211_i: Fix memory corruption bug in struct ieee80211_chanctx (Gustavo A. R. Silva)
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg)
  - wifi: cfg80211: clear wdev->cqm_config pointer on free (Johannes Berg)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - Revert "wifi: iwlwifi: remove retry loops in start" (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: don't add default link in fw restart flow (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay)
  - wifi: iwlwifi: mvm: SAR table alignment (Anjaneyulu)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd (Miri Korenblit)
  - wifi: iwlwifi: mvm: don't leak a link on AP removal (Emmanuel Grumbach)
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Wang Liang)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() (Vladimir Oltean)
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie)
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela)
  - selftests: netfilter: nft_flowtable.sh: make first pass deterministic (Florian Westphal)
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
  - mctp i2c: handle NULL header address (Matt Johnston)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel)
  - ice: fix crash on probe for DPLL enabled E810 LOM (Arkadiusz Kubalewski)
  - ice: block SF port creation in legacy mode (Michal Swiatkowski)
  - igb: Disable threaded IRQ for igb_msix_other (Wander Lairson Costa)
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu)
  - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values (Ley Foon Tan)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)
  - selftests: mptcp: list sysctl data (Matthieu Baerts (NGI0))
  - mptcp: init: protect sched with rcu_read_lock (Matthieu Baerts (NGI0))
  - docs: networking: packet_mmap: replace dead links with archive.org links (Levi Zim)
  - wifi: ath11k: Fix invalid ring usage in full monitor mode (Remi Pommarel)
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty)
  - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 (Bitterblue Smith)
  - wifi: rtw88: Fix the RX aggregation in USB 3 mode (Bitterblue Smith)
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (Ping-Ke Shih)
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau)
  - wifi: mac80211: Convert color collision detection to wiphy work (Remi Pommarel)
  - wifi: cfg80211: Add wiphy_delayed_work_pending() (Remi Pommarel)
  - wifi: cfg80211: Do not create BSS entries for unsupported channels (Chenming Huang)
  - wifi: mac80211: Fix setting txpower with emulate_chanctx (Ben Greear)
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä)
  - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() (Ben Hutchings)
  - wifi: mt76: do not increase mcu skb refcount if retry is not supported (Felix Fietkau)
  - wifi: rtw89: coex: add debug message of link counts on 2/5GHz bands for wl_info v7 (Ping-Ke Shih)
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (Christoffer Sandberg)
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (Christoffer Sandberg)
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ASoC: codecs: wcd937x: relax the AUX PDM watchdog (Alexey Klimov)
  - ASoC: codecs: wcd937x: add missing LO Switch control (Alexey Klimov)
  - ASoC: dt-bindings: rockchip,rk3308-codec: add port property (Dmitry Yashin)
  - ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Aleksei Vetrov)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (Hans de Goede)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - ALSA: hda/realtek: Limit internal Mic boost on Dell platform (Kailang Yang)
  - redhat: configs: Drop CONFIG_MEMSTICK_REALTEK_PCI config option (Desnes Nunes)
  - x86/uaccess: Avoid barrier_nospec() in 64-bit copy_from_user() (Linus Torvalds)
  - perf cap: Add __NR_capget to arch/x86 unistd (Ian Rogers)
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers: Synchronize {uapi/}linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Arnaldo Carvalho de Melo)
  - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT (Arnaldo Carvalho de Melo)
  - perf test: Handle perftool-testsuite_probe failure due to broken DWARF (Veronika Molnarova)
  - tools headers UAPI: Sync kvm headers with the kernel sources (Arnaldo Carvalho de Melo)
  - perf trace: Fix non-listed archs in the syscalltbl routines (Jiri Slaby)
  - perf build: Change the clang check back to 12.0.1 (Howard Chu)
  - perf trace augmented_raw_syscalls: Add more checks to pass the verifier (Howard Chu)
  - perf trace augmented_raw_syscalls: Add extra array index bounds checking to satisfy some BPF verifiers (Arnaldo Carvalho de Melo)
  - perf trace: The return from 'write' isn't a pid (Arnaldo Carvalho de Melo)
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)
  - scsi: ufs: core: Fix another deadlock during RTC update (Peter Wang)
  - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (John Garry)
  - Update the RHEL_DIFFERENCES help string (Don Zickus)
  - Put build framework for RT kernel in place for Fedora (Clark Williams)
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Chen Ridong)
  - sched_ext: Fix enq_last_no_enq_fails selftest (Tejun Heo)
  - sched_ext: Make cast_mask() inline (Tejun Heo)
  - scx: Fix raciness in scx_ops_bypass() (David Vernet)
  - scx: Fix exit selftest to use custom DSQ (David Vernet)
  - sched_ext: Fix function pointer type mismatches in BPF selftests (Vishal Chourasia)
  - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ (Ihor Solodrai)
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)
  - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof (Pei Xiao)
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails (Barry Song)
  - mseal: update mseal.rst (Jeff Xu)
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov)
  - selftests/mm: fix deadlock for fork after pthread_create with atomic_bool (Edward Liaw)
  - Revert "selftests/mm: replace atomic_bool with pthread_barrier_t" (Edward Liaw)
  - Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM" (Edward Liaw)
  - tools: testing: add expand-only mode VMA test (Lorenzo Stoakes)
  - mm/vma: add expand-only VMA merge mode and optimise do_brk_flags() (Lorenzo Stoakes)
  - resource,kexec: walk_system_ram_res_rev must retain resource flags (Gregory Price)
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi)
  - mm: numa_clear_kernel_node_hotplug: Add NUMA_NO_NODE check for node id (Nobuhiro Iwamatsu)
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis)
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park)
  - mm: mark mas allocation in vms_abort_munmap_vmas as __GFP_NOFAIL (Jann Horn)
  - x86/traps: move kmsan check after instrumentation_begin (Sabyrzhan Tasbolatov)
  - resource: remove dependency on SPARSEMEM from GET_FREE_REGION (Huang Ying)
  - mm/mmap: fix race in mmap_region() with ftruncate() (Liam R. Howlett)
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming)
  - fork: only invoke khugepaged, ksm hooks if no error (Lorenzo Stoakes)
  - fork: do not invoke uffd on fork if error occurs (Lorenzo Stoakes)
  - mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check (David Hildenbrand)
  - tpm: Lazily flush the auth session (Jarkko Sakkinen)
  - tpm: Rollback tpm2_load_null() (Jarkko Sakkinen)
  - tpm: Return tpm2_sessions_init() when null key creation fails (Jarkko Sakkinen)
  - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (Frank Li)
  - spi: geni-qcom: Fix boot warning related to pm_runtime and devres (Georgi Djakov)
  - spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (Bartosz Golaszewski)
  - spi: stm32: fix missing device mode capability in stm32mp25 (Alain Volmat)


author: Jan Stancek <jstancek@redhat.com> [6.11.0-29.el10]
changelog:
  - redhat/configs: enable xr_serial on rhel (Desnes Nunes)
  - redhat/configs: enable ATH12K for rhel (Jose Ignacio Tornos Martinez)
  - Linux 6.12-rc7 (Linus Torvalds)
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags (Abel Vesa)
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks (Qiang Yu)
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set (Barnabás Czémán)
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs (Johan Hovold)
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (Liu Peibao)
  - i2c: muxes: Fix return value check in mule_i2c_mux_probe() (Yang Yingliang)
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust)
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - mailmap: add entry for Thorsten Blum (Thorsten Blum)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)
  - signal: restore the override_rlimit logic (Roman Gushchin)
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - selftests: hugetlb_dio: check for initial conditions to skip in the start (Muhammad Usama Anjum)
  - mm: fix docs for the kernel parameter ``thp_anon=`` (Maíra Canal)
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input() (SeongJae Park)
  - mm/damon/core: handle zero schemes apply interval (SeongJae Park)
  - mm/damon/core: handle zero {aggregation,ops_update} intervals (SeongJae Park)
  - mm/mlock: set the correct prev on failure (Wei Yang)
  - objpool: fix to make percpu slot allocation more robust (Masami Hiramatsu (Google))
  - mm/page_alloc: keep track of free highatomic (Yu Zhao)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: refactor map_deny_write_exec() (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mm/thp: fix deferred split unqueue naming and locking (Hugh Dickins)
  - mm/thp: fix deferred split queue not partially_mapped (Hugh Dickins)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock (Mika Westerberg)
  - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING (Mika Westerberg)
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier (Rex Nie)
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation (Umang Jain)
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation (Umang Jain)
  - redhat: configs: rhel: generic: x86: Enable IPU6 based MIPI cameras (Kate Hsuan)
  - os-build: enable CONFIG_SCHED_CLASS_EXT for RHEL (Phil Auld)
  - NFSD: Fix READDIR on NFSv3 mounts of ext4 exports (Chuck Lever)
  - smb: client: Fix use-after-free of network namespace. (Kuniyuki Iwashima)
  - nvme/host: Fix RCU list traversal to use SRCU primitive (Breno Leitao)
  - thermal/of: support thermal zones w/o trips subnode (Icenowy Zheng)
  - tools/lib/thermal: Remove the thermal.h soft link when doing make clean (zhang jiao)
  - tools/lib/thermal: Fix sampling handler context ptr (Emil Dahl Juhl)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - cpufreq: intel_pstate: Update asym capacity for CPUs that were offline initially (Rafael J. Wysocki)
  - cpufreq: intel_pstate: Clear hybrid_max_perf_cpu before driver registration (Rafael J. Wysocki)
  - ACPI: processor: Move arch_init_invariance_cppc() call later (Mario Limonciello)
  - ksmbd: check outstanding simultaneous SMB operations (Namjae Jeon)
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create (Namjae Jeon)
  - ksmbd: Fix the missing xa_store error check (Jinjie Ruan)
  - scsi: ufs: core: Start the RTC update work later (Bart Van Assche)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - drm/xe: Stop accumulating LRC timestamp on job_free (Lucas De Marchi)
  - drm/xe/pf: Fix potential GGTT allocation leak (Michal Wajdeczko)
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL (Matthew Brost)
  - drm/xe: Fix possible exec queue leak in exec IOCTL (Matthew Brost)
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout (Nirmoy Das)
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout (Nirmoy Das)
  - drm/xe: Move LNL scheduling WA to xe_device.h (Nirmoy Das)
  - drm/xe: Use the filelist from drm for ccs_mode change (Balasubramani Vivekanandan)
  - drm/xe: Set mask bits for CCS_MODE register (Balasubramani Vivekanandan)
  - drm/panthor: Be stricter about IO mapping flags (Jann Horn)
  - drm/panthor: Lock XArray when getting entries for the VM (Liviu Dudau)
  - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Hans de Goede)
  - drm/imagination: Break an object reference loop (Brendan King)
  - drm/imagination: Add a per-file PVR context list (Brendan King)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - drm/amdgpu: Adjust debugfs register access permissions (Alex Deucher)
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (Lijo Lazar)
  - drm/amd/pm: correct the workload setting (Kenneth Feng)
  - drm/amd/pm: always pick the pptable from IFWI (Kenneth Feng)
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)
  - drm/amd/display: parse umc_info or vram_info based on ASIC (Aurabindo Pillai)
  - drm/amd/display: Fix brightness level not retained over reboot (Tom Chung)
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (Jyri Sarha)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (Markus Petri)
  - ASoC: SOF: amd: Fix for incorrect DMA ch status register offset (Venkata Prasad Potturu)
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (Mingcong Bai)
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)
  - MAINTAINERS: Generic Sound Card section (Kuninori Morimoto)
  - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip (Shenghao Ding)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - ALSA: ump: Don't enumeration invalid groups for legacy rawmidi (Takashi Iwai)
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
  - media: videobuf2-core: copy vb planes unconditionally (Tudor Ambarus)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - media: vivid: fix buffer overwrite when using > 32 buffers (Hans Verkuil)
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cec: extron-da-hd-4k-plus: don't use -1 as an error code (Mauro Carvalho Chehab)
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)
  - media: ar0521: don't overflow when checking PLL values (Mauro Carvalho Chehab)
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)
  - media: av7110: fix a spectre vulnerability (Mauro Carvalho Chehab)
  - media: mgb4: protect driver against spectre (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: dvb-core: add missing buffer index check (Hans Verkuil)
  - mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Koichiro Den)
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang)
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)
  - btrfs: fix per-subvolume RO/RW flags with new mount API (Qu Wenruo)
  - bcachefs: Fix UAF in __promote_alloc() error path (Kent Overstreet)
  - bcachefs: Change OPT_STR max to be 1 less than the size of choices array (Piotr Zalewski)
  - bcachefs: btree_cache.freeable list fixes (Kent Overstreet)
  - bcachefs: check the invalid parameter for perf test (Hongbo Li)
  - bcachefs: add check NULL return of bio_kmalloc in journal_read_bucket (Pei Xiao)
  - bcachefs: Ensure BCH_FS_may_go_rw is set before exiting recovery (Kent Overstreet)
  - bcachefs: Fix topology errors on split after merge (Kent Overstreet)
  - bcachefs: Ancient versions with bad bkey_formats are no longer supported (Kent Overstreet)
  - bcachefs: Fix error handling in bch2_btree_node_prefetch() (Kent Overstreet)
  - bcachefs: Fix null ptr deref in bucket_gen_get() (Kent Overstreet)
  - arm64: Kconfig: Make SME depend on BROKEN for now (Mark Rutland)
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid spurious interrupts (Gautam Menghani)
  - Fedora 6.12 configs part 1 (Justin M. Forbes)
  - MAINTAINERS: update AMD SPI maintainer (Raju Rangoju)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - regulator: rtq2208: Fix uninitialized use of regulator_config (ChiYuan Huang)
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (Wentao Liang)
  - net/smc: do not leave a dangling sk pointer in __smc_create() (Eric Dumazet)
  - rxrpc: Fix missing locking causing hanging calls (David Howells)
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (Wenjia Zhang)
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Pablo Neira Ayuso)
  - net: arc: rockchip: fix emac mdio node support (Johan Jonker)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)
  - virtio_net: Update rss when set queue (Philo Lu)
  - virtio_net: Sync rss config to device when virtnet_probe (Philo Lu)
  - virtio_net: Add hash_key_length check (Philo Lu)
  - virtio_net: Support dynamic rss indirection table size (Philo Lu)
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
  - net: vertexcom: mse102x: Fix possible double free of TX skb (Stefan Wahren)
  - e1000e: Remove Meteor Lake SMBUS workarounds (Vitaly Lifshits)
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)
  - idpf: fix idpf_vc_core_init error path (Pavan Kumar Linga)
  - idpf: avoid vport access in idpf_get_link_ksettings (Pavan Kumar Linga)
  - ice: change q_index variable type to s16 to store -1 value (Mateusz Polchlopek)
  - ice: Fix use after free during unload with ports in bridge (Marcin Szycik)
  - mptcp: use sock_kfree_s instead of kfree (Geliang Tang)
  - mptcp: no admin perm to list endpoints (Matthieu Baerts (NGI0))
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: ethernet: ti: am65-cpsw: fix warning in am65_cpsw_nuss_remove_rx_chns() (Roger Quadros)
  - net: ethernet: ti: am65-cpsw: Fix multi queue Rx on J7 (Roger Quadros)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)
  - Revert "Merge branch 'there-are-some-bugfix-for-the-hns3-ethernet-driver'" (Jakub Kicinski)
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (Marc Kleine-Budde)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (Marc Kleine-Budde)
  - can: rockchip_canfd: Drop obsolete dependency on COMPILE_TEST (Jean Delvare)
  - can: rockchip_canfd: CAN_ROCKCHIP_CANFD should depend on ARCH_ROCKCHIP (Geert Uytterhoeven)
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Marc Kleine-Budde)
  - can: {cc770,sja1000}_isa: allow building on x86_64 (Thomas Mühlbacher)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts (Suraj Gupta)
  - MAINTAINERS: Remove self from DSA entry (Florian Fainelli)
  - net: enetc: allocate vf_state during PF probes (Wei Fang)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)
  - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (Jinjie Ruan)
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value (Suraj Gupta)
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint (Vladimir Oltean)
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - MAINTAINERS: add self as reviewer for AXI PWM GENERATOR (Trevor Gamblin)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - nfs_common: fix localio to cope with racing nfs_local_probe() (Mike Snitzer)
  - NFS: Further fixes to attribute delegation a/mtime changes (Trond Myklebust)
  - NFS: Fix attribute delegation behaviour on exclusive create (Trond Myklebust)
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (NeilBrown)
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation (David Gstir)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)
  - tracing/selftests: Add tracefs mount options test (Kalesh Singh)
  - tracing: Document tracefs gid mount option (Kalesh Singh)
  - tracing: Fix tracefs mount options (Kalesh Singh)
  - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed (Vishnu Sankar)
  - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys (Renato Caldas)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - platform/x86/amd/pmc: Detect when STB is not available (Corey Hickey)
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model (Shyam Sundar S K)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Ming-Hung Tsai)
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - dm-verity: don't crash if panic_on_corruption is not selected (Mikulas Patocka)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm: fix a crash if blk_alloc_disk fails (Mikulas Patocka)
  - HID: core: zero-initialize the report buffer (Jiri Kosina)
  - redhat: set new gcov configs (Jan Stancek)
  - Don't ignore gitkeep files for ark-infra (Don Zickus)
  - redhat/kernel.spec: don't clear entire libdir when building tools (Jan Stancek)
  - redhat/configs: enable usbip for rhel (Jose Ignacio Tornos Martinez)
  - redhat: create 'crashkernel=' addons for UKI (Vitaly Kuznetsov)
  - redhat: avoid superfluous quotes in UKI cmdline addones (Vitaly Kuznetsov)
  - fedora: arm: updates for 6.12 (Peter Robinson)
  - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections (Bjorn Andersson)
  - rpmsg: glink: Handle rejected intent request better (Bjorn Andersson)
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling (Qingqing Zhou)
  - EDAC/qcom: Make irq configuration optional (Rajendra Nayak)
  - firmware: qcom: scm: fix a NULL-pointer dereference (Bartosz Golaszewski)
  - firmware: qcom: scm: suppress download mode error (Johan Hovold)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - MAINTAINERS: Qualcomm SoC: Match reserved-memory bindings (Simon Horman)
  - arm64: dts: qcom: x1e80100: fix PCIe5 interconnect (Johan Hovold)
  - arm64: dts: qcom: x1e80100: fix PCIe4 interconnect (Johan Hovold)
  - arm64: dts: qcom: x1e80100: Fix up BAR spaces (Konrad Dybcio)
  - arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e80100-microsoft-romulus: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e78100-t14s: fix nvme regulator boot glitch (Johan Hovold)
  - arm64: dts: qcom: x1e80100-crd Rename "Twitter" to "Tweeter" (Maya Matuszczyk)
  - arm64: dts: qcom: x1e80100: Fix PCIe 6a lanes description (Abel Vesa)
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1 (Dmitry Baryshkov)
  - arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block (Abel Vesa)
  - arm64: dts: qcom: x1e80100: fix PCIe5 PHY clocks (Johan Hovold)
  - arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks (Johan Hovold)
  - arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM (Fabien Parent)
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Cristian Marussi)
  - dt-bindings: firmware: arm,scmi: Add missing vendor string (Cristian Marussi)
  - firmware: arm_scmi: Reject clear channel request on A2P (Cristian Marussi)
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Xinqi Zhang)
  - MAINTAINERS: invert Misc RISC-V SoC Support's pattern (Conor Dooley)
  - riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 (E Shattow)
  - riscv: dts: starfive: disable unused csi/camss nodes (Conor Dooley)
  - firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors (Conor Dooley)
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (Diederik de Haas)
  - arm64: dts: rockchip: Drop invalid clock-names from es8388 codec nodes (Cristian Ciocaltea)
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro (Heiko Stuebner)
  - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus (Heiko Stuebner)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Remove undocumented supports-emmc property (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (Heiko Stuebner)
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards (Heiko Stuebner)
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v (Heiko Stuebner)
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (Diederik de Haas)
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (Diederik de Haas)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Designate Turing RK1's system power controller (Sam Edwards)
  - arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B (Dragan Simic)
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi (Dragan Simic)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (Geert Uytterhoeven)
  - riscv: dts: Replace deprecated snps,nr-gpios property for snps,dw-apb-gpio-port devices (Uwe Kleine-König)
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz (Marek Vasut)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: imx8mp-skov-revb-mi1010ait-1cp1: Assign "media_isp" clock rate (Liu Ying)
  - arm64: dts: imx8: Fix lvds0 device tree (Diogo Silva)
  - arm64: dts: imx8ulp: correct the flexspi compatible string (Haibo Chen)
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (Alexander Stein)
  - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process (Ben Chuang)
  - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function (Ben Chuang)
  - tpm: Lock TPM chip in tpm_pm_suspend() first (Jarkko Sakkinen)
  - Make setting of cma_pernuma tech preview (Chris von Recklinghausen) [RHEL-59621]
  - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)


author: Release Engineering <releng@rockylinux.org> - 6.11.0-29
changelog:
  - Porting to Rocky Linux 10, debranding and Rocky Linux branding
  - Add partial riscv64 support for build root


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Filip Janus <fjanus@redhat.com> - 5.3.25-57
changelog:
  - Add convert-util subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Disable shiping libdb for rhel except convert-tool


author: Jiri Pirko <jiri@resnulli.us> - 1.32-1
changelog:
  teamd: Add option to change evaluation logic of multiple link-watchers
  Revert: teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  teamd: lacp: don't move the port state from disabled when admin state is down
  teamd: lacp: set port to disabled state during removal
  teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  libteam: clear changed bits in case of TEAM_IFINFO_CHANGE
  misc: fix possible strncpy truncation bug
  teamd: stop iterating callbacks when a loop restart is requested
  teamd: do no remove the ports on shutdown with -N
  binding/python: ifindex 0 is invalid so do not process it
  teamd: Include missing headers for strrchr and memcmp
  libteamdctl: validate the bus name before using it
  options: move option temporary check after the err check
  teamd: lacp: increase "min_ports" upper limit to 1024
  fix build on OpenWRT/musl-libc
  teamd: increase the waitting time for daemon killing
  Revert "teamd: Disregard current state when considering port enablement"


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


