# changelog

author: Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-124.8.1.el10_1]
changelog:
  - Update RHEL_RELEASE, ZSTREAM, and DIST (Andrew Lukoshko)
  - Merge tag 'kernel-6.12.0-124.8.1.el10_1' into main (Julio Faracco)
  - Merge tag 'kernel-6.12.0-124.7.1.el10_1' into main (Jan Stancek)
  - Merge: kabi: add symbols to stablelist and enable check-kabi (Jan Stancek) [RHEL-113009]
  - Merge tag 'kernel-6.12.0-124.5.1.el10_1' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-124.4.1.el10_1' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-124.2.1.el10_1' into main (Jan Stancek)
  - x86/split_lock: Move Split and Bus lock code to a dedicated file (John Allen) [RHEL-50321]
  - Merge tag 'kernel-6.12.0-124.1.1.el10_1' into main (Julio Faracco)


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.4.1.el10_0]
changelog:
  - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925 (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (Bastien Nocera) [RHEL-79457] {CVE-2024-56653}
  - Bluetooth: btmtk: adjust the position to init iso data anchor (Bastien Nocera) [RHEL-79457] {CVE-2024-53238}
  - Bluetooth: btusb: mediatek: change the conditions for ISO interface (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Bastien Nocera) [RHEL-79457] {CVE-2024-56757}
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: move Bluetooth power off command position (Bastien Nocera) [RHEL-79457]
  - redhat/configs: Enable Mediatek Bluetooth USB drivers (Bastien Nocera) [RHEL-79457]
  - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-76090] {CVE-2024-56623}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-76089] {CVE-2024-56631}
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78975] {CVE-2025-1272}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.5.1.el10_0]
changelog:
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79110] {CVE-2025-21694}
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80387]
  - kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-81118]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77270]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.6.1.el10_0]
changelog:
  - nfs: Fix oops in nfs_netfs_init_request() when copying to cache (Olga Kornievskaia) [RHEL-77295] {CVE-2024-57927}
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-80112]
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - configs: enable FW_CACHE on centos-stream/rhel 10 for nouveau (Dave Airlie) [RHEL-80281]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.7.1.el10_0]
changelog:
  - Enable Intel VPU driver for RHEL (Fabien Dupont) [RHEL-38582]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80226]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-82677 RHEL-80534]
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_release_desc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_fill_cb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_can_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_alloc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_buff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_flush_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_io_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vzalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_array_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __trace_trigger_soft_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_print_bitmask_seq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_set_clr_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_encrypt_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_device_sk_destruct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tcp_gro_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_unbound_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_attr_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol starget_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol slab_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_skb_reason_drop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_gso_segment to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_expand to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_add_rx_frag_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_nents to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_memory_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __seq_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol secpath_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_unblock_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_sanitize_inquiry_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_rescan_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_print_command to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_normalize_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __scsi_iterate_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_host_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_get_vpd_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_set_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_from_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_block_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scmd_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout_uninterruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_alloc_num to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_expander_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_end_device_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_ata_ncq_prio_supported to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_start_check to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_enter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_init_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol reset_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware_nowait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_limits_commit_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_devmap_managed_folio_refs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_idle to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_validate_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_support_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start_aneg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_max_speed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_disconnect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_connect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_attached_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcix_set_mmrbc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_find_ro_info_keyword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_check_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_try_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_reset_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_vpd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_get_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_domain_bus_and_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_set_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_get_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_write_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_unlocked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_rom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_choose_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ullong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_put_unrefed_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_disable_direct_recycling to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_frag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_unregister_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_register_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_abort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_invalidate_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_set_remoteport_devloss to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rescan_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_io_getuuid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_segs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_receive_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_queue_set_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_get_num_default_rss_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim_get_rx_moderation to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_walk_all_upper_dev_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_core_stats_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_read_raw_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_powm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_get_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_uplink_netdev_event_replay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_access_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_create_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user_nul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_toio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_fromio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mdiobus_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_get_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio45_probe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol local_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_del_entry_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_add_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libie_rx_pt_lut to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_recycle_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_raw_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol krealloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmemdup_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmem_cache_create_args to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_size_roundup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree_sensitive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iter_div_u64_rem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_sched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_modify_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_ext_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_compute_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __iowrite64_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ioread32_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet6_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_write_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_read_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_new_client_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_del_adapter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_bit_add_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_notify_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_zeroed_page_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_free_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_cpu_idle_time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fortify_panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_tcp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_l2tpv3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_icmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_opts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fixed_size_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_terminate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_rolechg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_vendor_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_fpin_rcv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_get_event_number to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_timed_out to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_should_retry_cmd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_scsi_eh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fasync_helper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_rxfh_context_lost to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_params_from_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_forced_speed_maps_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_cpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_get_required_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq_nosync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_trans_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_fn_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_nested_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_board_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_recovery_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_wakeup_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_show_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_initialize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_mod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_devm_seqfile to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_prio_dscp_mask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol current_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc_t10dif to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_next_wrap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_remove_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_add_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol const_pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol byte_rev_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_last to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_get_prev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_setup_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_remove_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_job_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_queue_rq_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_unique_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_tagset_busy_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_pci_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blkcg_get_fc_appid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _bin2bcd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_thaw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_freeze to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpumask_var_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-79881]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.9.1.el10_0]
changelog:
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-80306] {CVE-2024-57901}
  - redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
  - shrinker: include rh_kabi.h (Čestmír Kalina) [RHEL-80552]
  - redhat: pad the folio_batch struct (Nico Pache) [RHEL-80552]
  - redhat: pad the lruvec structure for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the zone structures for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the wait_page_queue for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the lru_gen functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vmem_altmap struct for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vm_fault structure (Nico Pache) [RHEL-80552]
  - redhat: pad the tlbflush_unmap_batch struct for the KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the swap_cluster_info structure for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrinker struct for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrink_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the readahead_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the pglist_data structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the percpu structures (Nico Pache) [RHEL-80552]
  - redhat: pad the page_frag_cache for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the ns_common structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mmu_notifier functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the mm_struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempool_s structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempolicy struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the memory_failure_stats for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache_args struct (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache structure (Nico Pache) [RHEL-80552]
  - redhat: pad ip_conntrack_stat for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the free_area struct (Nico Pache) [RHEL-80552]
  - redhat: pad follow_pfnmap_args for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad anon_vma for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad access_coordinate for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the deferred_split queue for the kabi checker (Nico Pache) [RHEL-80552]
  - redhat: hide capture_control from kabi checker (Nico Pache) [RHEL-80552]
  - mm/memcg: Exclude mem_cgroup/obj_cgroup pointer from kABI signature computation (Waiman Long) [RHEL-80552]
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75653] {CVE-2025-21663}
  - Revert "smb: client: fix chmod(2) regression with ATTR_READONLY" (Jan Stancek)


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.18.1.el10_0]
changelog:
  - Import config changes from Centos Stream kernel kernel-6.12.0-77.el10
  - Bump internal version to 55.18.1
  - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
  - sched/rt: Fix race in push_rt_task MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation - upstream CVE-2024-56559
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
  - proc: fix UAF in proc_get_inode() CVE-2025-21999
  - ext4: ignore xattrs past end CVE-2025-37738
  - nvme-fabrics: handle zero MAXCMD without closing the connection
  - ext4: fix off-by-one error in do_split CVE-2025-23150
  - r8169: disable RTL8126 ZRX-DC timeout
  - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support
  - vmxnet3: unregister xdp rxq info in the reset path
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - ice: implement low latency PHY timer updates
  - ice: check low latency PHY timer update firmware capability
  - ice: add lock to protect low latency interface
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_*
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810
  - cifs: Fix integer overflow while processing acdirmax mount option CVE-2025-21963
  - smb: client: fix UAF in decryption with multichannel CVE-2025-37750
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - keys: Fix UAF in key_put() CVE-2025-21893
  - ndisc: use RCU protection in ndisc_alloc_skb() CVE-2025-21764
  - ipv6: use RCU protection in ip6_default_advmss() CVE-2025-21765
  - net: add dev_net_rcu() helper CVE-2025-21765
  - vfio/pci: Align huge faults to order
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del CVE-2025-21969
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd CVE-2025-21969
  - cifs: Fix integer overflow while processing closetimeo mount option CVE-2025-21962
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up CVE-2025-21887
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails CVE-2025-21979
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy CVE-2025-21979
  - net: fix geneve_opt length integer overflow CVE-2025-22055
  - vsock/virtio: discard packets if the transport changes CVE-2025-21669
  - net: gso: fix ownership in __udp_gso_segment CVE-2025-21926
  - xsk: fix an integer overflow in xp_create_and_assign_umem() CVE-2025-21997
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi CVE-2025-37943
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list CVE-2025-21919
  - drm/i915/display: Use joined pipes in dsc helpers for slices, bpp - upstream
  - drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size - upstream
  - drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc - upstream
  - drm/i915/display: Simplify intel_joiner_num_pipes and it's usage - upstream
  - drm/i915/display: Check whether platform supports joiner - upstream
  - Revert drm/i915/dp_mst: Handle error during DSC BW overhead/slice
  - Revert drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC
  - drm/mgag200: Added support for the new device G200eH5 - upstream
  - cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21964
  - ext4: fix OOB read when checking dotdot dir CVE-2025-37785
  - vsock: Orphan socket after transport release CVE-2025-21756
  - vsock: Keep the binding until socket destruction CVE-2025-21756
  - bpf, vsock: Invoke proto::close on close() CVE-2025-21756
  - idpf: call set_real_num_queues in idpf_open
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format CVE-2024-53104
  - redhat: enable CONFIG_WERROR=y
  - redhat: don't enforce WERROR for 3rd-party OOT kmods
  - redhat: make ENABLE_WERROR enable also KVM_WERROR
  - fortify: Hide run-time copy size from value range tracking
  - resolve_btfids: Fix compiler warnings
  - ixgbe: fix media cage present detection for E610 device
  - ixgbe: fix media type detection for E610 device
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - ixgbe: Enable link management in E610 device
  - ixgbe: Clean up the E610 link management related code
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection
  - ixgbe: Add support for EEPROM dump in E610 device
  - ixgbe: Add support for NVM handling in E610 device
  - ixgbe: Add link management support for E610 device
  - ixgbe: Add support for E610 device capabilities detection
  - ixgbe: Add support for E610 FW Admin Command Interface
  - smb: client: don't retry IO on failed negprotos with soft mounts - pick from MR
  - scsi: core: Fix command pass through retry regression - cherry pick from MR
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature CVE-2025-21966
  - ice: stop storing XDP verdict within ice_rx_buf
  - ice: gather page_count()'s of each frag right before XDP prog call
  - ice: put Rx buffers after being done with current frame
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() CVE-2025-21993
  - smb: client: fix regression with guest option
  - pnfs/flexfiles: retry getting layout segment for reads
  - nfs: fix incorrect error handling in LOCALIO
  - nfs: probe for LOCALIO when v3 client reconnects to server
  - nfs: probe for LOCALIO when v4 client reconnects to server
  - nfs/localio: remove redundant code and simplify LOCALIO enablement
  - nfs_common: add nfs_localio trace events
  - nfs_common: track all open nfsd_files per LOCALIO nfs_client
  - nfs_common: rename nfslocalio nfs_uuid_lock to nfs_uuids_lock
  - nfsd: nfsd_file_acquire_local no longer returns GC'd nfsd_file
  - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_
  - nfsd: update percpu_ref to manage references on nfsd_net
  - nfs: cache all open LOCALIO nfsd_file(s) in client
  - nfs_common: move localio_lock to new lock member of nfs_uuid_t
  - nfs_common: rename functions that invalidate LOCALIO nfs_clients
  - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
  - nfs/localio: add direct IO enablement with sync and async IO support
  - ice: ensure periodic output start time is in the future
  - ice: fix PHY Clock Recovery availability check
  - ice: Drop auxbus use for PTP to finalize ice_adapter move
  - ice: Use ice_adapter for PTP shared data instead of auxdev
  - ice: Initial support for E825C hardware in ice_adapter
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code
  - ice: Introduce ice_get_phy_model() wrapper
  - ice: Enable 1PPS out from CGU for E825C products
  - ice: Read SDP section from NVM for pin definitions
  - ice: Disable shared pin on E810 on setfunc
  - ice: Cache perout/extts requests and check flags
  - ice: Align E810T GPIO to other products
  - ice: Add SDPs support for E825C
  - ice: Implement ice_ptp_pin_desc
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() - modified CVE-2025-21927
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - mm/hugetlb: fix hugepage allocation for interleaved memory nodes
  - net: mana: use ethtool string helpers
  - net: mana: cleanup mana struct after debugfs_remove() - upstream
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
  - net: mana: Fix memory leak in mana_gd_setup_irqs
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
  - net: mana: Enable debugfs files for MANA device
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024
  - net: mana: Add get_link and get_link_ksettings in ethtool


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.19.1.el10_0]
changelog:
  - Clean git history at setup stage
  - Prevent kABI check error for BLK_CGROUP_PUNT_BIO
  - Bump internal version to 55.19.1
  - ibmvnic: Use kernel helpers for hex dumps
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - ice: Avoid setting default Rx VSI twice in switchdev setup
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - block/Kconfig: Allow selecting BLK_CGROUP_PUNT_BIO


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.20.1.el10_0]
changelog:
  - Bump internal version to 55.20.1
  - Adjust page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - Adjust dm mpath: Interface for explicit probing of active paths
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes - CVE-2025-21991
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - page_pool: Move pp_magic check into helper functions
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp - CVE-2025-37799
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq
  - dm-mpath: Don't grab work_mutex while probing paths
  - dm mpath: Interface for explicit probing of active paths
  - dm: Allow .prepare_ioctl to handle ioctls directly
  - ipv6: mcast: extend RCU protection in igmp6_send() - CVE-2025-21759


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.21.1.el10_0]
changelog:
  - Bump internal version to 55.21.1
  - ice, irdma: fix an off by one in error handling code
  - irdma: free iwdev->rf after removing MSI-X
  - ice: Fix signedness bug in ice_init_interrupt_scheme()
  - ice: init flow director before RDMA
  - ice: simplify VF MSI-X managing
  - ice: enable_rdma devlink param
  - ice: treat dyn_allowed only as suggestion
  - ice, irdma: move interrupts code to irdma
  - ice: get rid of num_lan_msix field
  - ice: remove splitting MSI-X between features
  - ice: devlink PF MSI-X max and min parameter
  - ice: ice_probe: init ice_adapter after HW init
  - ice: minor: rename goto labels from err to unroll
  - ice: split ice_init_hw() out from ice_init_dev()
  - ice: c827: move wait for FW to ice_init_hw()
  - exfat: fix random stack corruption after get_block - CVE-2025-22036


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.22.1.el10_0]
changelog:
  - Bump internal version to 55.22.1
  - mm/huge_memory: fix dereferencing invalid pmd migration entry - CVE-2025-37958
  - i2c: tegra: check msg length in SMBUS block read
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error - CVE-2025-38089
  - media: uvcvideo: Announce the user our deprecation intentions
  - media: uvcvideo: Allow changing noparam on the fly
  - media: uvcvideo: Invert default value for nodrop module param
  - media: uvcvideo: Propagate buf->error to userspace
  - media: uvcvideo: Flush the control cache when we get an event
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set
  - media: uvcvideo: Remove dangling pointers - CVE-2024-58002
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Fix double free in error path - CVE-2024-57980
  - wifi: iwlwifi: limit printed string from FW file - CVE-2025-21905


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.24.1.el10_0]
changelog:
  - Bump internal version to 55.24.1
  - net_sched: hfsc: Fix a UAF vulnerability in class handling - CVE-2025-37797
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - CVE-2025-22121
  - ext4: introduce ITAIL helper - CVE-2025-22121
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access - CVE-2025-38110
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() - CVE-2025-38088
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap - CVE-2025-38088
  - net/mlx5: Fill out devlink dev info only for PFs
  - RDMA/mlx5: Fix page_size variable overflow - CVE-2025-22091
  - ACPI: CPPC: Fix _CPC register setting issue


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.25.1.el10_0]
changelog:
  - Bump internal version to 55.25.1
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - CVE-2025-38022
  - RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
  - nvme-tcp: sanitize request list handling - CVE-2025-38264
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
  - tcp: adjust rcvq_space after updating scaling ratio
  - ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
  - ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
  - net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
  - padata: avoid UAF for reorder_work - CVE-2025-21726
  - padata: fix UAF in padata_reorder - CVE-2025-21727
  - padata: add pd get/put refcnt helper
  - padata: fix sysfs store callback check
  - padata: Clean up in padata_do_multithreaded()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove - CVE-2025-22020


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.27.1.el10_0]
changelog:
  - Bump internal version to 55.27.1
  - Fix includes for mm: fix copy_vma() error handling for hugetlb mappings
  - Revert sch_htb: make htb_qlen_notify() idempotent
  - Revert sch_drr: make drr_qlen_notify() idempotent
  - Revert sch_qfq: make qfq_qlen_notify() idempotent
  - Revert codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - Revert sch_htb: make htb_deactivate() idempotent
  - Revert net/sched: Always pass notifications when child class becomes empty
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159
  - Documentation: Fix pci=config_acs= example
  - PCI/ACS: Fix 'pci=config_acs=' parameter
  - Revert "smb: client: fix TCP timers deadlock after rmmod" - CVE-2025-22077
  - Revert smb: client: Fix netns refcount imbalance causing leaks and use-after-free 
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - wifi: ath12k: fix invalid access to memory - CVE-2025-38292
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array - CVE-2024-56721
  - crypto: algif_hash - fix double free in hash_accept - CVE-2025-38079
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-38350
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-38350
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-38350
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race - CVE-2025-38085
  - mm/hugetlb: unshare page tables during VMA split, not before - CVE-2025-38084
  - tools/testing/vma: add missing function stub
  - mm: fix copy_vma() error handling for hugetlb mappings
  - PCI: Use downstream bridges for distributing resources
  - PCI/pwrctrl: Cancel outstanding rescan work when unregistering - CVE-2025-38137
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.28.1.el10_0]
changelog:
  - Conflict with xdp-tools < 1.5.4
  - Bump internal version to 55.28.1
  - tls: always refresh the queue when reading sock - CVE-2025-38471
  - selftests: net: bpf_offload: add 'libbpf_global' to ignored maps
  - selftests: net: fix error message in bpf_offload
  - selftests: net: add more info to error in bpf_offload
  - net: fix udp gso skb_segment after pull from frag_list - CVE-2025-38124
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - s390/pci: Serialize device addition and removal
  - s390/pci: Allow re-add of a reserved but not yet removed device
  - s390/pci: Prevent self deletion in disable_slot()
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device()
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
  - s390/pci: Fix missing check for zpci_create_device() error return
  - s390/pci: Fix potential double remove of hotplug slot
  - s390/topology: Improve topology detection
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() - CVE-2025-38250
  - selftests/bpf: Adjust data size to have ETH_HLEN - CVE-2025-21867
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() - CVE-2025-21867
  - i2c/designware: Fix an initialization issue - CVE-2025-38380


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.25.1.el10_0]
changelog:
  - Bump internal version to 55.25.1
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - CVE-2025-38022
  - RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
  - nvme-tcp: sanitize request list handling - CVE-2025-38264
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
  - tcp: adjust rcvq_space after updating scaling ratio
  - ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
  - ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
  - net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
  - padata: avoid UAF for reorder_work - CVE-2025-21726
  - padata: fix UAF in padata_reorder - CVE-2025-21727
  - padata: add pd get/put refcnt helper
  - padata: fix sysfs store callback check
  - padata: Clean up in padata_do_multithreaded()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove -CVE-2025-22020


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.29.1.el10_0]
changelog:
  - Bump internal version to 55.29.1
  - ice: fix eswitch code memory leak in reset scenario - CVE-2025-38417
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - net_sched: ets: Fix double list add in class with netem as child qdisc - CVE-2025-37914
  - sch_ets: make est_qlen_notify() idempotent
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw - CVE-2025-38200
  - cxgb4: use port number to set mac addr


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.30.1.el10_0]
changelog:
  - tipc: Fix use-after-free in tipc_conn_close(). - CVE-2025-38464
  - Bump internal version to 55.30.1
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - CVE-2025-37823
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
  - s390/pci: Fix handling of isolated VFs
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
  - s390/pci: Fix SR-IOV for PFs initially in standby
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - CVE-2025-38211
  - udp: Fix memory accounting leak. - CVE-2025-22058
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
  - ext4: only dirty folios when data journaling regular files - CVE-2025-38220
  - vsock: Fix transport_* TOCTOU - CVE-2025-38461
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry - CVE-2025-38472


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.31.1.el10_0]
changelog:
  - Adjust sched/fair: Adhere to place_entity() constraints
  - Bump internal version to 55.31.1
  - sched/fair: Adhere to place_entity() constraints
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero
  - net/sched: ets: use old 'nbands' while purging unused classes - CVE-2025-38350
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - net_sched: ets: fix a race in ets_qdisc_change() - CVE-2025-38107
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-37953
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-37798
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-37932
  - drm/vkms: Fix use after free and double free on init error - CVE-2025-22097
  - Revert "cxl/acpi: Fix load failures due to single window creation failure"
  - udmabuf: fix a buf size overflow issue during udmabuf creation - CVE-2025-37803
  - drm/framebuffer: Acquire internal references on GEM handles - CVE-2025-38449
  - drm/gem: Acquire references on GEM handles for framebuffers - CVE-2025-38449
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
  - nvme-ioctl: fix leaked requests on mapping error


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.32.1.el10_0]
changelog:
  - Bump internal version to 55.32.1
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() - CVE-2025-38352


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.33.1.el10_0]
changelog:
  - Fix kABI for net_namespace.h
  - Bump internal version to 55.33.1
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface - CVE-2025-38500
  - idpf: convert control queue mutex to a spinlock - CVE-2025-38392
  - eth: bnxt: fix missing ring index trim on error path - CVE-2025-37873
  - tcp: Correct signedness in skb remaining space calculation - CVE-2025-38463
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() - CVE-2025-38550
  - redhat: selftests/bpf: Add cpuv4 variant
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards - CVE-2025-38200
  - use uniform permission checks for all mount propagation changes - CVE-2025-38498
  - do_change_type(): refuse to operate on unmounted/not ours mounts - CVE-2025-38498
  - ublk: make sure ubq->canceling is set when queue is frozen - CVE-2025-22068
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
  - scsi: lpfc: Use memcpy() for BIOS version - CVE-2025-38332
  - net: introduce per netns packet chains


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.34.1.el10_0]
changelog:
  - Bump internal version to 55.34.1
  - sunrpc: fix handling of server side tls alerts - CVE-2025-38566
  - i40e: When removing VF MAC filters, only check PF-set MAC
  - usb: dwc3: gadget: check that event count does not exceed event buffer length - CVE-2025-37810


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.37.1.el10_0]
changelog:
  - fix kABI build errors
  - Adjust new tls selftest for current code
  - Bump internal version to 55.37.1
  - selftests: tls: add tests for zero-length records - CVE-2025-39682
  - tls: fix handling of zero-length records on the rx_list - CVE-2025-39682
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass - CVE-2025-38396
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure - CVE-2025-39698
  - ice: use fixed adapter index for E825C embedded devices
  - ice: use DSN instead of PCI BDF for ice_adapter index
  - tcp: drop secpath at the same time as we currently drop dst
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code
  - cifs: Fix the smbd_response slab to allow usercopy - CVE-2025-38523
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
  - smb: client: make use of common smbdirect_socket_parameters
  - smb: smbdirect: introduce smbdirect_socket_parameters
  - smb: client: make use of common smbdirect_socket
  - smb: smbdirect: add smbdirect_socket.h
  - smb: client: make use of common smbdirect.h
  - smb: smbdirect: add smbdirect.h with public structures
  - smb: client: make use of common smbdirect_pdu.h
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions
  - s390/sclp: Fix SCCB present check - CVE-2025-39694
  - net: stmmac: fix TSO DMA API usage causing oops
  - smb: client: fix use-after-free in cifs_oplock_break - CVE-2025-38527


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.31.1.el10_0]
changelog:
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero (Phil Auld) [RHEL-91404]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
  - drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
  - Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
  - drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.32.1.el10_0]
changelog:
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.33.1.el10_0]
changelog:
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109530] {CVE-2025-38500}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106061] {CVE-2025-38392}
  - eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104564] {CVE-2025-37873}
  - tcp: Correct signedness in skb remaining space calculation (CKI Backport Bot) [RHEL-107844] {CVE-2025-38463}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111154] {CVE-2025-38550}
  - redhat: selftests/bpf: Add cpuv4 variant (Viktor Malik) [RHEL-109928]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105138] {CVE-2025-38200}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-99437] {CVE-2025-22068}
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM JIRA: https://issues.redhat.com/browse/RHEL-109821 Y-JIRA: https://issues.redhat.com/browse/RHEL-79173 (Jakub Ramaseuski)
  - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105936] {CVE-2025-38332}
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88923]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.34.1.el10_0]
changelog:
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
  - i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.35.1.el10_0]
changelog:
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
  - cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
  - smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.36.1.el10_0]
changelog:
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
  - ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
  - ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.37.1.el10_0]
changelog:
  - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.38.1.el10_0]
changelog:
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
  - net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
  - net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
  - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
  - net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.39.1.el10_0]
changelog:
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.40.1.el10_0]
changelog:
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
  - s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
  - s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
  - s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
  - net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
  - enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
  - enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
  - enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
  - enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
  - enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
  - enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
  - enic: enic rq code reorg (John Meneghini) [RHEL-106602]
  - enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
  - enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
  - enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
  - enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
  - enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
  - enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
  - enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
  - enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
  - enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
  - enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
  - enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
  - enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
  - enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
  - enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
  - scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
  - scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
  - scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
  - scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
  - scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.41.1.el10_0]
changelog:
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
  - erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
  - s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
  - NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
  - mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.42.1.el10_0]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
  - KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
  - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
  - cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.43.1.el10_0]
changelog:
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
  - igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
  - igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
  - igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
  - igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
  - igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
  - igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
  - igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
  - coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
  - cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
  - x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
  - x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-92175]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
  - module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
  - module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
  - Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
  - module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
  - execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
  - execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
  - x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
  - x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
  - x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
  - module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
  - x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
  - alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
  - alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
  - maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
  - x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
  - execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
  - x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
  - arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
  - module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
  - asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
  - mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
  - mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-115351]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
  - ice: use string choice helpers (Petr Oros) [RHEL-115351]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.3.1.el10_0]
changelog:
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204]
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568]
  - uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149]


author: Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-55.9.1.el10_0]
changelog:
  - redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
  - Merge: Add symbols to stablelist and enable check-kabi (Jan Stancek) [RHEL-79881]
  - Merge tag 'kernel-6.12.0-55.9.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.7.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.4.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.3.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.2.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.1.1.el10_0' into main (Jan Stancek)


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.1
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131422)
  - CVE-2025-65018: heap buffer overflow (RHEL-131435)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133212)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.2
changelog:
  - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148323)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148818)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146645)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-6.2
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148254)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-6.1
changelog:
  - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148565)
  - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148588)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.1.el10_1
changelog:
  - tools: Secure guest check for Intel in virt-host-validate (RHEL-111863)
  - qemu: Check if INTEL Trust Domain Extention support is enabled (RHEL-111863)
  - qemucapabilitiesdata: Document '+inteltdx' variant (RHEL-111863)
  - qemucapabilitiestest: Add data for the qemu-10.1.0 dev cycle on x86_64 for the '+inteltdx' variant (RHEL-111863)
  - qemu: Add QEMU_CAPS_TDX_GUEST capability (RHEL-111863)
  - conf: Expose TDX feature in domain capabilities (RHEL-111863)
  - conf: Add tdx as launch security type (RHEL-111863)
  - conf: Validate TDX launchSecurity element mrConfigId/mrOwner/mrOwnerConfig (RHEL-111863)
  - qemu: Add command line and validation for TDX type (RHEL-111863)
  - conf: Expose TDX type in domain launch security capability (RHEL-111863)
  - qemu: Force special parameters enabled for TDX guest (RHEL-111863)
  - qemu: log the crash information for TDX (RHEL-111863)
  - qemu_firmware: Pick the right firmware for TDX guests (RHEL-111863)
  - conf: Add Intel TDX Quote Generation Service(QGS) support (RHEL-111863)
  - qemu: Add command line for TDX Quote Generation Service(QGS) (RHEL-111863)
  - qemu: Add FakeReboot support for TDX guest (RHEL-111863)
  - qemu: Support reboot command in guest (RHEL-111863)
  - qemu: Avoid duplicate FakeReboot for secure guest (RHEL-111863)
  - qemu: Send event VIR_DOMAIN_EVENT_[STOPPED|STARTED] during recreation (RHEL-111863)
  - qemu: Support domain reset command for TDX guest (RHEL-111863)
  - qemuxmlconftest: Add latest version of 'launch-security-tdx*' test data (RHEL-111863)
  - docs: domain: Add documentation for Intel TDX guest (RHEL-111863)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.2.el10_1
changelog:
  - cpu_conf: Make virCPUDefFilterFeatures return void (RHEL-126094)
  - qemu_domain: Simplify qemuDomainFixupCPUs (RHEL-126094)
  - qemu_domain: Fix qemuDomainFixupCPUs (RHEL-126094)
  - qemu_process: Always fix CPUs on reconnect (RHEL-126094)
  - qemu_monitor: Filter CPU features reported by QEMU (RHEL-126094)
  - qemu: Ignore "ht" CPU feature (RHEL-126094)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.5.el10_1
changelog:
  - esx: Allow disk images in subdirectories (RHEL-140865)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140465)
  - esx: URI encode inventory objects twice (RHEL-140465)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.7.el10_1
changelog:
  - esx: Debug URL just before opening with curl (RHEL-142863)
  - esx: Abstract all URL-creation code into one function (RHEL-142863)
  - esx: Switch to creating URLs using virURIFormat (RHEL-142863)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-47
changelog:
  - Makefile: Add PREV support for clog (bcl)
    Related: RHEL-40021
  - git-changelog: Change line length limit to 120 (bcl)
    Related: RHEL-40021
  - README: Update README with note about PREV= (bcl)
    Related: RHEL-40021
  - Remove libvisual from runtime-cleanup as it's being removed from RHEL 10 (tpopela)
    Resolves: RHEL-39949
  - tests: Do not use fedora.repo for the test build (bcl)
    Resolves: RHEL-40021
  - Drop libreport from templates (mkolman)
    Resolves: RHEL-39794


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
    https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Tomas Halman <thalman@redhat.com> - 2.4.15-4.el10_0.1
changelog:
  Resolves: RHEL-86212 - mod_auth_openidc allows OIDCProviderAuthRequestMethod
              POSTs to leak protected data (CVE-2025-31492)


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-2.1
changelog:
  - Resolves: RHEL-99954 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-4
changelog:
  - Resolves: RHEL-134483 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-2
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127092)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092)
    Resolves: CVE-2025-12801


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-2
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-3
changelog:
  - Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
    file modification via buffer overflow in ngx_http_dav_module


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-4
changelog:
  - Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
    to memory corruption via crafted MP4 file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-5
changelog:
  - Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-6
changelog:
  - Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
    Code Execution via specially crafted MP4 files


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-85673
  - Support nm connection with empty connection.interface-name. RHEL-84756


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110779
  - Support IPv4 forwarding. RHEL-110788
  - Support IPSec `leftsendcert` option. RHEL-110635


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121112
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121993


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110636
  - Support IPv4 forwarding. RHEL-110789
  - Support IPSec `leftsendcert` option. RHEL-110636


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Use global DNS even for static IP with static DNS. (RHEL-126738)
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-130914)


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85838


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1.el10_0.1
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117381]
  - Resolves: RHEL-117381
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.0.z])


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.el10_1.1
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117383]
  - Resolves: RHEL-117383
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.el10_1.2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-114958]
  - Resolves: RHEL-114958
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10.1.z])


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-12
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128397
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128387


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-13
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155811


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16.3
changelog:
  - Stop declaring presence of version 3_4_0 despite having some symbols from it
    Resolves: RHEL-105518


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-7
changelog:
  - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
    CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
    CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
    Resolves: RHEL-142062
    Resolves: RHEL-141985
    Resolves: RHEL-142053
    Resolves: RHEL-142049
    Resolves: RHEL-142045
    Resolves: RHEL-142041
    Resolves: RHEL-142037
    Resolves: RHEL-142033
    Resolves: RHEL-142029
    Resolves: RHEL-142008
    Resolves: RHEL-142025
    Resolves: RHEL-142021


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream 
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs: 
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Gianluca Zuccarelli <gzuccare@redhat.com> - 134.1-3
changelog:
  - Fix json tailoring blueprint conversion
    Resolves: RHEL-115392
  - Fix unclosed logrus logging pipes
    Resolves: RHEL-121533
  - Update go-jose dependency
    Resolves: RHEL-82957 (CVE-2025-27144)


author: imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 149-5
changelog:
  - Rebuilt to fix: 
    - CVE-2025-61726
    - CVE-2025-61728
    - CVE-2025-61729
    - CVE-2025-68121
    - RHEL-146726
    - RHEL-146931
    - RHEL-147353
    - RHEL-149232


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.2-1
changelog:
  - Rebase to ostree 2025.2 Backport
    https://github.com/ostreedev/ostree/pull/3473 Backport
    https://github.com/ostreedev/ostree/pull/3472


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Mark Will <mark.will@oracle.com> - 0^20250217.ga1e48a0-5
changelog:
  - Resolves: RHEL-83979 RHEL-84157 RHEL-86761
  - Resolves: RHEL-84249 RHEL-83979 RHEL-84157 RHEL-84248
  - Resolves: RHEL-80297


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-512.1
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87185


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-17.alma.2
changelog:
  - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm-
    logo.png to watermark.png in the spinner theme directory to ensure the
    AlmaLinux watermark is displayed in plymouth.


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/2adbe89)
  - Resolves: RHEL-79695


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/e48006b)
  - Resolves: RHEL-82199


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.0.z]"
  - Resolves: RHEL-82959


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x - [RHEL 10.0] ZeroDay"
  - Resolves: RHEL-83556


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0.z]"
  - Resolves: RHEL-82775


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Importing a tar.xz archive as a container fails with error 'layer 0 <...> does not match config's DiffID'  - [RHEL 10.0] 0day"
  - Resolves: RHEL-85219


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing - [RHEL 10.0] 0day"
  - Resolves: RHEL-86093


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "Rootless container libpod/tmp/persist directories not cleaned up, fill up tmpfs - [RHEL 10.0] 0day"
  - Resolves: RHEL-86550


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-10
changelog:
  - rebuild to fix CVE-2025-22871 podman: Request smuggling due to acceptance of invalid chunked data in net/http
  - Resolves: RHEL-90011


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f944b21)
  - fixes "Terminate healthcheck command upon reaching timeout. [rhel-10.0.z]"
  - Resolves: RHEL-96916


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9811294)
  - fixes "CVE-2025-6032 podman: podman missing TLS verification [rhel-10.0.z]"
  - Resolves: RHEL-96698


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/b0d88c7)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-10.0.z]"
  - Resolves: RHEL-113141


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/7078b79)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-10.1]"
  - Resolves: RHEL-113140


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/c5a3735)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald - [RHEL 10.1] 0day"
  - Resolves: RHEL-110318


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/61231e1)
  - fixes "Timeouts while pushing Sigstore logs to Rekor - [RHEL 10.1] 0day"
  - Resolves: RHEL-111077


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/2791007)
  - fixes "[Minor Incident] CVE-2025-52881 podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-10.1.z]"
  - Resolves: RHEL-126635


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/3bf5313)
  - fixes "run 1.2.x upgrade throws error while using nocopy volume mount filesystem option - [RHEL 10.1]"
  - Resolves: RHEL-132532


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/a58af02)
  - fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Podman [rhel-10.1.z]"
  - Resolves: RHEL-132825


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/0a20b84)
  - fixes "CVE-2025-47913 podman: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-10.1.z]"
  - Resolves: RHEL-134778


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/b194cd9)
  - fixes "podman build system test easily failed with TIMEOUT"
  - Resolves: RHEL-138650


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149364 RHEL-149398 RHEL-149332


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.2-1
changelog:
  - Switch DEFAULT_VERSION to RHEL10 (bcl)
    Resolves: RHEL-30566
  - Add a DEFAULT_VERSION variable to version.py (bcl)
  - Deprecate network team options on RHEL 10 (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-3.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143054 RHEL-143105 RHEL-144852


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.9-2.2
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  - Enable PAC and BTI hardware protections for aarch64
  - Resolves: RHEL-98059, RHEL-98046, RHEL-97812, RHEL-98061, RHEL-98179, RHEL-98865


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.0.0-19
changelog:
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-122777
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-122776


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.2.0-1
changelog:
  - python-podman-5.2.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.2.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.3.0-1
changelog:
  - python-podman-5.3.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.3.0
  - Resolves: RHEL-69004


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-4
changelog:
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-88435 RHEL-88437]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Minor-refactoring.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-88435 RHEL-88437]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-88435 RHEL-88437]
  - Resolves: RHEL-88435
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-10.1])
  - Resolves: RHEL-88437
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Eduard Abdullin <eabdullin@almalinux.org> - 18:10.0.0-12.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-13
changelog:
  - Added TDX support
  - Resolves: RHEL-20797
    ([Intel 10.0 FEAT] TDX: host: Virt-QEMU: Add safe device pass-through for TD)
  - Resolves: RHEL-49727
    ([Intel 10.0 FEAT] [SPR][EMR] Virt-QEMU: TDX: Allow to configure apic bus clock)
  - Resolves: RHEL-50307
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14
changelog:
  - kvm-hw-uefi-clear-uefi-vars-buffer-in-uefi_vars_write-ca.patch [RHEL-108614]
  - kvm-hw-uefi-return-success-for-notifications.patch [RHEL-108614]
  - kvm-hw-uefi-check-access-for-first-variable.patch [RHEL-108614]
  - Resolves: RHEL-108614
    (CVE-2025-8860 qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.1
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-120074]
  - Resolves: RHEL-120074
    ([rhel10] Backport "arm/kvm: report registers we failed to set" [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.2
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120118]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120118]
  - Resolves: RHEL-120118
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.1.z])


author: Jon Maloy <jmaloy@redhat.com> - 10.0.0-14.el10_1.3
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-129549]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-129549]
  - Resolves: RHEL-129549
    ([RHEL 10]snp guest fail to boot with hugepage [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.4
changelog:
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133521]
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-133527]
  - Resolves: RHEL-133521
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device [rhel-10.1.z])
  - Resolves: RHEL-133527
    (Assertion failure on drain with iothread and I/O load [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.5
changelog:
  - kvm-Revert-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-be.patch [RHEL-135453]
  - Resolves: RHEL-135453
    (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: pdcm [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-58316]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68444]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68444]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68444]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68444]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68444]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68444]
  - Resolves: RHEL-58316
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel10.0)
  - Resolves: RHEL-68444
    (The new "boot order" feature is sometimes not working as expected [RHEL 10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-69047]
  - Resolves: RHEL-69047
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-32665]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-32665]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-32665]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-32665]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71939]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67108]
  - Resolves: RHEL-32665
    ([IBM 10.0 FEAT] KVM: CPU model for new IBM Z HW - qemu-kvm part)
  - Resolves: RHEL-71939
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-67108
    ([aarch64] [rhel-10.0] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-43412]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-43412]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-43412]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-43412]
  - kvm-pc-q35-Bump-max_cpus-to-4096-vcpus.patch [RHEL-57668]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73005]
  - kvm-virtio-net-disable-USO-for-all-RHEL9.patch [RHEL-69500]
  - Resolves: RHEL-43412
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-10.0-beta])
  - Resolves: RHEL-57668
    ([RFE] [HPEMC] [RHEL-10.0] qemu-kvm: support up to 4096 VCPUs)
  - Resolves: RHEL-73005
    (qemu-kvm: vhost: reports error while updating IOTLB entries)
  - Resolves: RHEL-69500
    ([Stable_Guest_ABI][USO][9.6.0-machine-type]From 10.0 to RHEL.9.6.0 the guest with 9.6 machine type only, the guest crashed with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-11
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-73002]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73835]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-74361]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-74461]
  - Resolves: RHEL-73002
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9 [rhel-10])
  - Resolves: RHEL-73835
    (VM crashes when requesting domstats [rhel-10])
  - Resolves: RHEL-74361
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))
  - Resolves: RHEL-74461
    (fsfreeze hooks doesn't log error on system logs when running hook fails [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-12
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65618]
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72717]
  - kvm-arm-disable-pauth-for-virt-rhel9-in-RHEL10.patch [RHEL-71761]
  - Resolves: RHEL-65618
    ([RHEL10] Failed to hot add PCIe device behind xio3130 downstream)
  - Resolves: RHEL-72717
    (Boot fall back to cdrom from network not always working)
  - Resolves: RHEL-71761
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-13
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-76908]
  - Resolves: RHEL-76908
    (Ensure qemu as NBD server does not flood logs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-14
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73894]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78370]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78370]
  - Resolves: RHEL-73894
    (No RARP packets on the destination after migration [rhel-10])
  - Resolves: RHEL-78370
    (Add vhost-user internal migration for passt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15
changelog:
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54670]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54670]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54670]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54670]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54670]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54670]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54670]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54670]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54670]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54670]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54670]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54670]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54670]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54670]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54670]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54670]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54670]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54670]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54670]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54670]
  - Resolves: RHEL-54670
    (Provide QMP command for block device reactivation after migration [rhel-10.0])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.1
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-80622]
  - Resolves: RHEL-80622
    (Allow libvirt to restart passt/vhost-user when the process is killed


author: Alan Steinberg <alan.steinberg> - 9.1.0-15.2
changelog:
  - kvm-hw-i386-Fix-machine-type-compatibility.patch [RHEL-92430]
  - Resolves: RHEL-92430
    (Fix x86 M-type compats [rhel-10.0.z])


author: Kevin Lyons <kevin.x.lyons> - 9.1.0-15.3
changelog:
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-100765]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-99889]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-99889]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-99889]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-99889]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-99889]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-99889]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-99889]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-99889]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-99889]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-99889]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-99889]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-99889]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-99889]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - Resolves: RHEL-100765
    (Video stuck after switchover phase when play one video during migration [rhel-10.0.z])
  - Resolves: RHEL-99889
    (-ftrivial-auto-var-init=zero reduced performance [rhel-10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15.el10_0.1
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-80522]
  - Resolves: RHEL-80522
    (Allow libvirt to restart passt/vhost-user when the process is killed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15.el10_0.4
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-108727]
  - Resolves: RHEL-108727
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.0.z])


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: RHEL Packaging Agent <jotnar@redhat.com> - 6.9.1-2.2
changelog:
  - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion
    guard to prevent stack overflow
    Resolves: RHEL-119719


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Eduard Abdullin <eabdullint@almalinux.org> - 293-1.alma.2
changelog:
  - Enable frame pointers for AlmaLinux 10+
  - Add x86_64 variants to arch macros (java, gap, nodejs, valgrind, mono, ldc)


author: Rich Megginson <rmeggins@redhat.com> - 1.106.0-0.1
changelog:
  - Resolves: RHEL-46225 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
  - Resolves: RHEL-102635 : journald - feat: Add MaxRetention configuration
  - All roles support ansible 2.19
  - All roles support the latest ansible-lint


author: Rich Megginson <rmeggins@redhat.com> - 1.106.1-0.1
changelog:
  - Resolves: RHEL-103887 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
  - Resolves: RHEL-103573 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
  - ha_cluster - ansible 2.19 support
  - bootloader - fix wording in README


author: Rich Megginson <rmeggins@redhat.com> - 1.107.0-0.1
changelog:
  - Resolves: RHEL-105093 : podman - specifying multiple users causes resources to be associated with wrong user
  - Resolves: RHEL-95757 : storage - Improve error reporting when invalid or unsupported RAID configuration is given
  - Resolves: RHEL-95729 : storage - [RHEL10] Incorrect key file in crypttab entry for volume encrypted_vol
  - refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
  - fix tests in postfix, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.1-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - Resolves: RHEL-95719 : storage - Tests verification fails on encrypted LVM on top of MD RAID
  - Resolves: RHEL-106261 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d
  - fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
  - fix postfix role tests related to rebooting
  - fix ha_cluster role tests related to missing fence agent
  - add firewall test debugging for interface tests


author: Rich Megginson <rmeggins@redhat.com> - 1.108.3-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - add bootloader test for this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Rich Megginson <rmeggins@redhat.com> - 1.92.0-0.1
changelog:
  - Resolves: RHEL-70536 : certificate - rhel-system-roles.certificate with IPA backend hangs processes when repeating playbook [rhel-10]
  - Resolves: RHEL-70549 : ha_cluster - list cloud agent packages by architecture [rhel-10]
  - Resolves: RHEL-46219 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export corosync configuration
  - Resolves: RHEL-70554 : postfix - feat: support postfix_default_database_type [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.92.1-0.1
changelog:
  - Resolves: RHEL-45303 : ha_cluster - rhel_system_roles.ha_cluster - adapt the role for pcs-0.12
  - Resolves: RHEL-70571 : systemd - fix: Always become user we are managing [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.93.0-0.1
changelog:
  - Resolves: RHEL-70700 : storage - Could not find luks2 key size in verify-pool-member-encryption.yml
  - also resolves some test failures in cockpit


author: Rich Megginson <rmeggins@redhat.com> - 1.94.1-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking [rhel-10]
  - this adds cron support for aide
  - Resolves: RHEL-73442 : network - fix: Prioritize find link info by permanent MAC address, with fallback to current address [rhel-10]
  - Resolves: RHEL-73443 : podman - fix: get user information for secrets [rhel-10]
  - Resolves: RHEL-73441 : sshd - fix: use quote with command, shell and validate with variable [rhel-10]
  - Resolves: RHEL-73440 : sshd - fix: rename var sshd -> sshd_config and deprecate the former [rhel-10]
  - Resolves: RHEL-73439 : sshd - fix: Reload the service when needed [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.94.1-0.2
changelog:
  - Resolves: RHEL-67411 New role aide to manage system integrity checking
  - not really related to aide - new community.general collection rhsm_repository.py
  - module now has line lengths > 164 which causes ansible-lint errors due to vendoring
  - fixed - skip pep8 checking


author: Rich Megginson <rmeggins@redhat.com> - 1.94.2-0.1
changelog:
  - Resolves: RHEL-76504 : storage - Ansible storage role 'grow_to_fill' option on LVM pools always failing with LVM resize failure due to miscalculation of free extents. [rhel-10]
  - also includes updates for el10 for ha_cluster and rhc
  - new community.general 10.3.0


author: Rich Megginson <rmeggins@redhat.com> - 1.95.3-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes aide ostree support
  - fixes storage role ostree support
  - fixes cockpit tests_packages_full
  - fixes kdump tests_ssh_wrapper
  - fix crash in selinux.py module on el7


author: Rich Megginson <rmeggins@redhat.com> - 1.95.4-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes an issue with parameter name
  - fixes an issue with changed reporting true when nothing has changed


author: Rich Megginson <rmeggins@redhat.com> - 1.95.5-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes issue with certificate tests_basic_ipa.yml


author: Rich Megginson <rmeggins@redhat.com> - 1.95.7-0.1
changelog:
  - Resolves: RHEL-82525 : rhc - rhc: does not enable content in EL10 systems [rhel-10]
  - plus an upgrade to rhc role to fix a testing issue
  - Resolves: RHEL-82526 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on RHEL-10 [rhel-10]


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.21.3-111
changelog:
  - resolves: RHEL-101762 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.21.3-106)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.80-1
changelog:
  - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
  - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
  - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
  - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
  - Corrected version in the description of CIS profiles (RHEL-143955)
  - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-6
changelog:
  - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67847]
  - Resolves: RHEL-67847
    (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-7
changelog:
  - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-68975]
  - Resolves: RHEL-68975
    (remove iasl build dependency)


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Vit Mojzis <vmojzis@redhat.com> - 42.1.7-1.2
changelog:
  - Update specfile triggers for DSP modules (RHEL-132492)
  - Update specfile trigger for smartmontools
  - Update specfile trigger for openwsman
  - Move triggerin scriptlets to the parent packages (RHEL-150914)
  - Rebuild policy before running {binsbin|varrun}-convert.sh (RHEL-128498)


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.19-1
changelog:
  - Allow systemd-journald getattr nsfs files
  Resolves: RHEL-71803
  - Allow systemd-related domains getattr nsfs files
  Resolves: RHEL-71803


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.20-1
changelog:
  - Allow virtqemud domain transition on numad execution
  Resolves: RHEL-65789
  - Support virt live migration using ssh
  Resolves: RHEL-53972
  - Allow ssh_t read systemd config files
  Resolves: RHEL-53972
  - Allow virtqemud permissions needed for live migration
  Resolves: RHEL-43217
  - Allow virtqemud the getpgid process permission
  Resolves: RHEL-46357
  - Allow virtqemud manage nfs dirs when virt_use_nfs boolean is on
  Resolves: RHEL-71068
  - Allow virtqemud relabelfrom virt_log_t files
  Resolves: RHEL-48236
  - Allow virtqemud relabel tun_socket
  Resolves: RHEL-71394
  - Allow gnome-remote-desktop dbus chat with policykit
  Resolves: RHEL-35877
  - Update ktlsh policy
  Resolves: RHEL-42672
  - Confine the ktls service
  Resolves: RHEL-42672
  - Allow request-key to read /etc/passwd
  Resolves: RHEL-71490
  - Allow request-key to manage all domains' keys
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
changelog:
  - Allow init create vsock socket for sshd
  Resolves: RHEL-72549
  - Support ssh connections via systemd-ssh-generator
  Resolves: RHEL-72549
  - Allow ssh generator work with systemd unit files
  Resolves: RHEL-72549
  - Confine systemd system-ssh-generator
  Resolves: RHEL-72549
  - Allow login_userdomain getattr nsfs files
  Resolves: RHEL-72549
  - Allow virtqemud send a generic signal to the ssh client domain
  Resolves: RHEL-53972
  - Add the auth_dontaudit_read_passwd_file() interface
  Resolves: RHEL-71490
  - Dontaudit request-key read /etc/passwd
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
changelog:
  - Allow staff user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-69118
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-69118
  - Allow svirt_t read sysfs files
  Resolves: RHEL-71270
  - Label /dev/pmem[0-9]+ with fixed_disk_device_t
  Resolves: RHEL-71656
  - Add support for the KVM guest memfd anon inodes
  Resolves: RHEL-69128
  - Allow sysadm user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-71665
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-71665


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.23-1
changelog:
  - Remove the lockdown class from the policy
  Resolves: RHEL-36741
  - Remove socket from unconfined_domain_type allow rule
  Resolves: RHEL-36741
  - Include key_socket in socket_class_set
  Resolves: RHEL-36741


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.24-1
changelog:
  - Allow systemd-generator connect to syslog over a unix datagram socket
  Resolves: RHEL-75879
  - Allow ssh_t to change role to system_r
  Resolves: RHEL-53972
  - Allow virtnodedev create /etc/mdevctl.d/scripts.d with bin_t type
  Resolves: RHEL-39893
  - Allow virtqemud manage fixed disk device nodes
  Resolves: RHEL-71656
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72861
  - Allow systemd-machined read the vsock device
  Resolves: RHEL-74280
  - Allow pcmsensor write nmi_watchdog state information
  Resolves: RHEL-52838
  - Label /proc/sys/kernel/nmi_watchdog with sysctl_nmi_watchdog_t
  Resolves: RHEL-52838


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
changelog:
  - Update ktlshd policy to read /proc/keys and domain keyrings
  Resolves: RHEL-42672
  - Allow pcmsensor read nmi_watchdog state information
  Resolves: RHEL-52838
  - Support peer-to-peer migration of vms using ssh
  Resolves: RHEL-77351
  - Allow virt_domain read hardware state information unconditionally
  Resolves: RHEL-71270
  - Allow timemaster write to sysfs files
  Resolves: RHEL-44637
  - Allow virtqemud map svirt_image_t plain files
  Resolves: RHEL-40080
  - Allow virtqemud unmount a filesystem with extended attributes
  Resolves: RHEL-40080
  - Allow virtqemud work with nvdimm devices
  Resolves: RHEL-71656
  - Update virtqemud policy regarding the svirt_tcg_t domain
  Resolves: RHEL-71270
  - Allow virtqemud use hostdev usb devices conditionally
  Resolves: RHEL-74230
  - Support saving and restoring a VM to/from a block device
  Resolves: RHEL-76138
  - Allow virtnwfilterd dbus chat with firewalld
  Resolves: RHEL-76138
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-62763
  - Allow virtstoraged write to sysfs files
  Resolves: RHEL-44637
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-54019
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77114
  - Allow init mounton crypto sysctl files
  Resolves: RHEL-56250


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
changelog:
  - Rename winbind_rpcd_* types to samba_dcerpcd_*
  Resolves: RHEL-14759
  - Allow samba-dcerpcd work with ctdb cluster
  Resolves: RHEL-14759
  - Revert "Remove socket from unconfined_domain_type allow rule"
  Resolves: RHEL-77327
  - Dontaudit access of virt-related permissive domains
  Resolves: RHEL-77808
  - Add selinux_requires_min macro
  Resolves: RHEL-54715
  - Filter out EPEL related modules
  Resolves: RHEL-73505


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.0.z]"
  - Resolves: RHEL-82961


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-2
changelog:
  - rebuild to fix CVE-2025-22871 skopeo: Request smuggling due to acceptance of invalid chunked data in net/http
  - Resolves: RHEL-89227


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6.1
changelog:
  - Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information
    disclosure via authentication credential leakage in error handling


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2.10.2-3.3
changelog:
  - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.11.1-2.1
changelog:
  - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows
    privilege escalation on AD-joined Linux systems [rhel-10.1.z]


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-8.p5.2
changelog:
  - RHEL 10.0.Z ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100008
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100021


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-5
changelog:
  - Add extra SELinux policies.
    https://github.com/stefanberger/swtpm/issues/970
    Resolves: RHEL-70835
    Resolves: RHEL-73809


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
  - Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
  - Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
  - Resolves: RHEL-55194 - Fix changelog version
  - Resolves: RHEL-46156
    tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
changelog:
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
changelog:
  - Resolves: RHEL-108900
    tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108902
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108904
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108908
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
changelog:
  - Resolves: RHEL-102184
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves: RHEL-108906
    tomcat: Denial of service (CVE-2025-52520)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3.el10_1.1
changelog:
  - Resolves: RHEL-124494
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-91729
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  - Resolves: RHEL-132527
    tomcat: Denial of service (CVE-2025-61795)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Initial commit on c10s
    Resolves: RHEL-69841
  - tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5
changelog:
  - Resolves: RHEL-82927
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:9.0.87-5.1
changelog:
  - Resolves: RHEL-91765
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-71981
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Craig Guiller <craig.guiller@oracle.com> - 1:9.0.87-5.3
changelog:
  - Resolves:
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves:
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves:
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves:
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves:
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves:
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves:
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5.el10_0.1
changelog:
  - Resolves: RHEL-91750
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-94960
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-7
changelog:
  - Resolves: RHEL-108485
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108493
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108501
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108509
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108522
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108517
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8
changelog:
  - Resolves: RHEL-102186
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8.el10_1.1
changelog:
  - Resolves: RHEL-124497
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-91732
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-1
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104451


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Patsy Griffin <patsy@redhat.com> - 2026a-1
changelog:
  - Update to tzdata-2026a (RHEL-154023)
    - Correct the transition times for Moldova.
    - The POSIXRULES option is now obsolete.


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


