# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.31.1.el10_2]
changelog:
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180776]
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
  - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
  - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.31.1
changelog:
  - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
  - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
    RHEL's eventpoll series carrying the same fix and is dropped
  - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
  - RHEL changelog for 211.31.1 follows:


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.32.1.el10_2]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.32.1
changelog:
  - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450)
  - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are
    superseded by RHEL's copies and dropped
  - RHEL changelog for 211.32.1 follows:


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.33.1.el10_2]
changelog:
  - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
  - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
  - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.33.1
changelog:
  - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455)
  - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
    (1445, 1446) are superseded by RHEL's copies and dropped
  - RHEL changelog for 211.33.1 follows:


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.34.1.el10_2]
changelog:
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
  - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.34.1
changelog:
  - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458)
  - RHEL changelog for 211.34.1 follows:


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.35.1.el10_2]
changelog:
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
  - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
  - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
  - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
  - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.36.1.el10_2]
changelog:
  - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
  - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
  - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
  - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
  - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
  - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
  - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
  - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
  - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
  - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
  - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
  - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
  - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
  - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
  - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
  - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324]
  - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
  - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
  - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.37.1.el10_2]
changelog:
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.37.1
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.39.1.el10_2]
changelog:
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
  - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
  - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
  - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.39.1
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained
  - gve: update QPL page registration logic to honor max_registered_pages
    (backport from upstream)
  - gve: enable reading max ring size from the device in DQO-QPL mode (backport
    from upstream)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.40.1.el10_2]
changelog:
  - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
  - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.41.1.el10_2]
changelog:
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.42.1.el10_2]
changelog:
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
  - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.43.1.el10_2]
changelog:
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
  - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
  - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
  - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
  - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
  - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
  - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
  - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
  - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
  - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
  - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
  - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
  - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
  - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
  - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
  - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
  - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
  - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
  - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
  - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
  - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
  - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.43.1
changelog:
  - KVM: x86: check for invalid/obsolete root after making MMU pages available
    {CVE-2026-64561}
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained
  - gve: update QPL page registration logic to honor max_registered_pages
    (backport from upstream)
  - gve: enable reading max ring size from the device in DQO-QPL mode (backport
    from upstream)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.44.1.el10_2]
changelog:
  - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
  - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
  - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
  - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
  - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
  - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
  - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
  - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
  - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
  - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
  - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.45.1.el10_2]
changelog:
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
  - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
  - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
  - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.46.1.el10_2]
changelog:
  - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.47.1.el10_2]
changelog:
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
  - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
  - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
  - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
  - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
  - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
  - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.47.1
changelog:
  - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361}
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained
  - gve: update QPL page registration logic to honor max_registered_pages
    (backport from upstream)
  - gve: enable reading max ring size from the device in DQO-QPL mode (backport
    from upstream)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.48.1.el10_2]
changelog:
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
  - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
  - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
  - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
  - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
  - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
  - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
  - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
  - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
  - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
  - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.49.1.el10_2]
changelog:
  - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
  - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
  - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
  - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
  - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
  - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
  - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
  - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.2.1.el10_2]
changelog:
  - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618]
  - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.3.1.el10_2]
changelog:
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
  - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800]
  - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521]
  - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521]
  - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.4.1.el10_2]
changelog:
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.5.1.el10_2]
changelog:
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
  - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
  - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
  - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
  - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
  - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
  - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
  - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
  - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
  - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
  - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
  - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
  - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
  - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
  - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
  - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
  - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
  - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
  - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
  - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
  - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
  - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
  - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
  - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
  - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
  - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
  - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.6.1.el10_2]
changelog:
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
  - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
  - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
  - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
  - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
  - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
  - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.7.1.el10_2]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
  - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
  - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
  - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
  - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
  - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
  - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}


author: Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-211.7.1.el10_2]
changelog:
  - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
  - kabi: enable check-kabi (Čestmír Kalina)
  - kabi: add symbols to stablelist (Čestmír Kalina)
  - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
  - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.7.1
changelog:
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.7.3
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
    (CVE-2026-46300 "Fragnesia")
  - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
    replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-211.7.4
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
    (refresh to upstream v5: now also covers skb_segment() and
    tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
  - smb: client: reject userspace cifs.spnego descriptions (upstream commit
    3da1fdf4efbc)


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.4.1.el10_0]
changelog:
  - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925 (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (Bastien Nocera) [RHEL-79457] {CVE-2024-56653}
  - Bluetooth: btmtk: adjust the position to init iso data anchor (Bastien Nocera) [RHEL-79457] {CVE-2024-53238}
  - Bluetooth: btusb: mediatek: change the conditions for ISO interface (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Bastien Nocera) [RHEL-79457] {CVE-2024-56757}
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: move Bluetooth power off command position (Bastien Nocera) [RHEL-79457]
  - redhat/configs: Enable Mediatek Bluetooth USB drivers (Bastien Nocera) [RHEL-79457]
  - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-76090] {CVE-2024-56623}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-76089] {CVE-2024-56631}
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78975] {CVE-2025-1272}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.5.1.el10_0]
changelog:
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79110] {CVE-2025-21694}
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80387]
  - kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-81118]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77270]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.6.1.el10_0]
changelog:
  - nfs: Fix oops in nfs_netfs_init_request() when copying to cache (Olga Kornievskaia) [RHEL-77295] {CVE-2024-57927}
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-80112]
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - configs: enable FW_CACHE on centos-stream/rhel 10 for nouveau (Dave Airlie) [RHEL-80281]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.7.1.el10_0]
changelog:
  - Enable Intel VPU driver for RHEL (Fabien Dupont) [RHEL-38582]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80226]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-82677 RHEL-80534]
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_release_desc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_fill_cb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_can_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_alloc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_buff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_flush_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_io_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vzalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_array_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __trace_trigger_soft_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_print_bitmask_seq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_set_clr_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_encrypt_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_device_sk_destruct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tcp_gro_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_unbound_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_attr_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol starget_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol slab_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_skb_reason_drop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_gso_segment to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_expand to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_add_rx_frag_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_nents to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_memory_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __seq_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol secpath_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_unblock_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_sanitize_inquiry_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_rescan_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_print_command to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_normalize_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __scsi_iterate_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_host_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_get_vpd_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_set_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_from_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_block_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scmd_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout_uninterruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_alloc_num to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_expander_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_end_device_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_ata_ncq_prio_supported to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_start_check to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_enter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_init_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol reset_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware_nowait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_limits_commit_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_devmap_managed_folio_refs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_idle to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_validate_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_support_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start_aneg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_max_speed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_disconnect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_connect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_attached_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcix_set_mmrbc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_find_ro_info_keyword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_check_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_try_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_reset_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_vpd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_get_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_domain_bus_and_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_set_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_get_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_write_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_unlocked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_rom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_choose_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ullong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_put_unrefed_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_disable_direct_recycling to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_frag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_unregister_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_register_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_abort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_invalidate_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_set_remoteport_devloss to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rescan_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_io_getuuid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_segs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_receive_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_queue_set_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_get_num_default_rss_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim_get_rx_moderation to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_walk_all_upper_dev_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_core_stats_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_read_raw_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_powm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_get_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_uplink_netdev_event_replay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_access_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_create_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user_nul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_toio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_fromio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mdiobus_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_get_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio45_probe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol local_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_del_entry_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_add_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libie_rx_pt_lut to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_recycle_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_raw_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol krealloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmemdup_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmem_cache_create_args to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_size_roundup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree_sensitive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iter_div_u64_rem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_sched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_modify_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_ext_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_compute_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __iowrite64_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ioread32_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet6_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_write_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_read_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_new_client_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_del_adapter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_bit_add_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_notify_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_zeroed_page_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_free_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_cpu_idle_time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fortify_panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_tcp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_l2tpv3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_icmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_opts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fixed_size_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_terminate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_rolechg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_vendor_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_fpin_rcv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_get_event_number to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_timed_out to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_should_retry_cmd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_scsi_eh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fasync_helper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_rxfh_context_lost to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_params_from_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_forced_speed_maps_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_cpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_get_required_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq_nosync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_trans_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_fn_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_nested_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_board_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_recovery_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_wakeup_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_show_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_initialize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_mod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_devm_seqfile to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_prio_dscp_mask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol current_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc_t10dif to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_next_wrap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_remove_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_add_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol const_pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol byte_rev_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_last to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_get_prev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_setup_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_remove_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_job_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_queue_rq_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_unique_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_tagset_busy_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_pci_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blkcg_get_fc_appid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _bin2bcd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_thaw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_freeze to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpumask_var_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-79881]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.9.1.el10_0]
changelog:
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-80306] {CVE-2024-57901}
  - redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
  - shrinker: include rh_kabi.h (Čestmír Kalina) [RHEL-80552]
  - redhat: pad the folio_batch struct (Nico Pache) [RHEL-80552]
  - redhat: pad the lruvec structure for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the zone structures for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the wait_page_queue for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the lru_gen functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vmem_altmap struct for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vm_fault structure (Nico Pache) [RHEL-80552]
  - redhat: pad the tlbflush_unmap_batch struct for the KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the swap_cluster_info structure for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrinker struct for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrink_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the readahead_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the pglist_data structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the percpu structures (Nico Pache) [RHEL-80552]
  - redhat: pad the page_frag_cache for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the ns_common structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mmu_notifier functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the mm_struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempool_s structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempolicy struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the memory_failure_stats for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache_args struct (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache structure (Nico Pache) [RHEL-80552]
  - redhat: pad ip_conntrack_stat for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the free_area struct (Nico Pache) [RHEL-80552]
  - redhat: pad follow_pfnmap_args for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad anon_vma for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad access_coordinate for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the deferred_split queue for the kabi checker (Nico Pache) [RHEL-80552]
  - redhat: hide capture_control from kabi checker (Nico Pache) [RHEL-80552]
  - mm/memcg: Exclude mem_cgroup/obj_cgroup pointer from kABI signature computation (Waiman Long) [RHEL-80552]
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75653] {CVE-2025-21663}
  - Revert "smb: client: fix chmod(2) regression with ATTR_READONLY" (Jan Stancek)


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.18.1.el10_0]
changelog:
  - Import config changes from Centos Stream kernel kernel-6.12.0-77.el10
  - Bump internal version to 55.18.1
  - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
  - sched/rt: Fix race in push_rt_task MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation - upstream CVE-2024-56559
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
  - proc: fix UAF in proc_get_inode() CVE-2025-21999
  - ext4: ignore xattrs past end CVE-2025-37738
  - nvme-fabrics: handle zero MAXCMD without closing the connection
  - ext4: fix off-by-one error in do_split CVE-2025-23150
  - r8169: disable RTL8126 ZRX-DC timeout
  - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support
  - vmxnet3: unregister xdp rxq info in the reset path
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - ice: implement low latency PHY timer updates
  - ice: check low latency PHY timer update firmware capability
  - ice: add lock to protect low latency interface
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_*
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810
  - cifs: Fix integer overflow while processing acdirmax mount option CVE-2025-21963
  - smb: client: fix UAF in decryption with multichannel CVE-2025-37750
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - keys: Fix UAF in key_put() CVE-2025-21893
  - ndisc: use RCU protection in ndisc_alloc_skb() CVE-2025-21764
  - ipv6: use RCU protection in ip6_default_advmss() CVE-2025-21765
  - net: add dev_net_rcu() helper CVE-2025-21765
  - vfio/pci: Align huge faults to order
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del CVE-2025-21969
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd CVE-2025-21969
  - cifs: Fix integer overflow while processing closetimeo mount option CVE-2025-21962
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up CVE-2025-21887
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails CVE-2025-21979
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy CVE-2025-21979
  - net: fix geneve_opt length integer overflow CVE-2025-22055
  - vsock/virtio: discard packets if the transport changes CVE-2025-21669
  - net: gso: fix ownership in __udp_gso_segment CVE-2025-21926
  - xsk: fix an integer overflow in xp_create_and_assign_umem() CVE-2025-21997
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi CVE-2025-37943
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list CVE-2025-21919
  - drm/i915/display: Use joined pipes in dsc helpers for slices, bpp - upstream
  - drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size - upstream
  - drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc - upstream
  - drm/i915/display: Simplify intel_joiner_num_pipes and it's usage - upstream
  - drm/i915/display: Check whether platform supports joiner - upstream
  - Revert drm/i915/dp_mst: Handle error during DSC BW overhead/slice
  - Revert drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC
  - drm/mgag200: Added support for the new device G200eH5 - upstream
  - cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21964
  - ext4: fix OOB read when checking dotdot dir CVE-2025-37785
  - vsock: Orphan socket after transport release CVE-2025-21756
  - vsock: Keep the binding until socket destruction CVE-2025-21756
  - bpf, vsock: Invoke proto::close on close() CVE-2025-21756
  - idpf: call set_real_num_queues in idpf_open
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format CVE-2024-53104
  - redhat: enable CONFIG_WERROR=y
  - redhat: don't enforce WERROR for 3rd-party OOT kmods
  - redhat: make ENABLE_WERROR enable also KVM_WERROR
  - fortify: Hide run-time copy size from value range tracking
  - resolve_btfids: Fix compiler warnings
  - ixgbe: fix media cage present detection for E610 device
  - ixgbe: fix media type detection for E610 device
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - ixgbe: Enable link management in E610 device
  - ixgbe: Clean up the E610 link management related code
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection
  - ixgbe: Add support for EEPROM dump in E610 device
  - ixgbe: Add support for NVM handling in E610 device
  - ixgbe: Add link management support for E610 device
  - ixgbe: Add support for E610 device capabilities detection
  - ixgbe: Add support for E610 FW Admin Command Interface
  - smb: client: don't retry IO on failed negprotos with soft mounts - pick from MR
  - scsi: core: Fix command pass through retry regression - cherry pick from MR
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature CVE-2025-21966
  - ice: stop storing XDP verdict within ice_rx_buf
  - ice: gather page_count()'s of each frag right before XDP prog call
  - ice: put Rx buffers after being done with current frame
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() CVE-2025-21993
  - smb: client: fix regression with guest option
  - pnfs/flexfiles: retry getting layout segment for reads
  - nfs: fix incorrect error handling in LOCALIO
  - nfs: probe for LOCALIO when v3 client reconnects to server
  - nfs: probe for LOCALIO when v4 client reconnects to server
  - nfs/localio: remove redundant code and simplify LOCALIO enablement
  - nfs_common: add nfs_localio trace events
  - nfs_common: track all open nfsd_files per LOCALIO nfs_client
  - nfs_common: rename nfslocalio nfs_uuid_lock to nfs_uuids_lock
  - nfsd: nfsd_file_acquire_local no longer returns GC'd nfsd_file
  - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_
  - nfsd: update percpu_ref to manage references on nfsd_net
  - nfs: cache all open LOCALIO nfsd_file(s) in client
  - nfs_common: move localio_lock to new lock member of nfs_uuid_t
  - nfs_common: rename functions that invalidate LOCALIO nfs_clients
  - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
  - nfs/localio: add direct IO enablement with sync and async IO support
  - ice: ensure periodic output start time is in the future
  - ice: fix PHY Clock Recovery availability check
  - ice: Drop auxbus use for PTP to finalize ice_adapter move
  - ice: Use ice_adapter for PTP shared data instead of auxdev
  - ice: Initial support for E825C hardware in ice_adapter
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code
  - ice: Introduce ice_get_phy_model() wrapper
  - ice: Enable 1PPS out from CGU for E825C products
  - ice: Read SDP section from NVM for pin definitions
  - ice: Disable shared pin on E810 on setfunc
  - ice: Cache perout/extts requests and check flags
  - ice: Align E810T GPIO to other products
  - ice: Add SDPs support for E825C
  - ice: Implement ice_ptp_pin_desc
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() - modified CVE-2025-21927
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - mm/hugetlb: fix hugepage allocation for interleaved memory nodes
  - net: mana: use ethtool string helpers
  - net: mana: cleanup mana struct after debugfs_remove() - upstream
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
  - net: mana: Fix memory leak in mana_gd_setup_irqs
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
  - net: mana: Enable debugfs files for MANA device
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024
  - net: mana: Add get_link and get_link_ksettings in ethtool


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.19.1.el10_0]
changelog:
  - Clean git history at setup stage
  - Prevent kABI check error for BLK_CGROUP_PUNT_BIO
  - Bump internal version to 55.19.1
  - ibmvnic: Use kernel helpers for hex dumps
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - ice: Avoid setting default Rx VSI twice in switchdev setup
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - block/Kconfig: Allow selecting BLK_CGROUP_PUNT_BIO


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.20.1.el10_0]
changelog:
  - Bump internal version to 55.20.1
  - Adjust page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - Adjust dm mpath: Interface for explicit probing of active paths
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes - CVE-2025-21991
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - page_pool: Move pp_magic check into helper functions
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp - CVE-2025-37799
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq
  - dm-mpath: Don't grab work_mutex while probing paths
  - dm mpath: Interface for explicit probing of active paths
  - dm: Allow .prepare_ioctl to handle ioctls directly
  - ipv6: mcast: extend RCU protection in igmp6_send() - CVE-2025-21759


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.21.1.el10_0]
changelog:
  - Bump internal version to 55.21.1
  - ice, irdma: fix an off by one in error handling code
  - irdma: free iwdev->rf after removing MSI-X
  - ice: Fix signedness bug in ice_init_interrupt_scheme()
  - ice: init flow director before RDMA
  - ice: simplify VF MSI-X managing
  - ice: enable_rdma devlink param
  - ice: treat dyn_allowed only as suggestion
  - ice, irdma: move interrupts code to irdma
  - ice: get rid of num_lan_msix field
  - ice: remove splitting MSI-X between features
  - ice: devlink PF MSI-X max and min parameter
  - ice: ice_probe: init ice_adapter after HW init
  - ice: minor: rename goto labels from err to unroll
  - ice: split ice_init_hw() out from ice_init_dev()
  - ice: c827: move wait for FW to ice_init_hw()
  - exfat: fix random stack corruption after get_block - CVE-2025-22036


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.22.1.el10_0]
changelog:
  - Bump internal version to 55.22.1
  - mm/huge_memory: fix dereferencing invalid pmd migration entry - CVE-2025-37958
  - i2c: tegra: check msg length in SMBUS block read
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error - CVE-2025-38089
  - media: uvcvideo: Announce the user our deprecation intentions
  - media: uvcvideo: Allow changing noparam on the fly
  - media: uvcvideo: Invert default value for nodrop module param
  - media: uvcvideo: Propagate buf->error to userspace
  - media: uvcvideo: Flush the control cache when we get an event
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set
  - media: uvcvideo: Remove dangling pointers - CVE-2024-58002
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Fix double free in error path - CVE-2024-57980
  - wifi: iwlwifi: limit printed string from FW file - CVE-2025-21905


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.24.1.el10_0]
changelog:
  - Bump internal version to 55.24.1
  - net_sched: hfsc: Fix a UAF vulnerability in class handling - CVE-2025-37797
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - CVE-2025-22121
  - ext4: introduce ITAIL helper - CVE-2025-22121
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access - CVE-2025-38110
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() - CVE-2025-38088
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap - CVE-2025-38088
  - net/mlx5: Fill out devlink dev info only for PFs
  - RDMA/mlx5: Fix page_size variable overflow - CVE-2025-22091
  - ACPI: CPPC: Fix _CPC register setting issue


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.25.1.el10_0]
changelog:
  - Bump internal version to 55.25.1
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - CVE-2025-38022
  - RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
  - nvme-tcp: sanitize request list handling - CVE-2025-38264
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
  - tcp: adjust rcvq_space after updating scaling ratio
  - ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
  - ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
  - net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
  - padata: avoid UAF for reorder_work - CVE-2025-21726
  - padata: fix UAF in padata_reorder - CVE-2025-21727
  - padata: add pd get/put refcnt helper
  - padata: fix sysfs store callback check
  - padata: Clean up in padata_do_multithreaded()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove - CVE-2025-22020


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.27.1.el10_0]
changelog:
  - Bump internal version to 55.27.1
  - Fix includes for mm: fix copy_vma() error handling for hugetlb mappings
  - Revert sch_htb: make htb_qlen_notify() idempotent
  - Revert sch_drr: make drr_qlen_notify() idempotent
  - Revert sch_qfq: make qfq_qlen_notify() idempotent
  - Revert codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - Revert sch_htb: make htb_deactivate() idempotent
  - Revert net/sched: Always pass notifications when child class becomes empty
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159
  - Documentation: Fix pci=config_acs= example
  - PCI/ACS: Fix 'pci=config_acs=' parameter
  - Revert "smb: client: fix TCP timers deadlock after rmmod" - CVE-2025-22077
  - Revert smb: client: Fix netns refcount imbalance causing leaks and use-after-free 
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - wifi: ath12k: fix invalid access to memory - CVE-2025-38292
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array - CVE-2024-56721
  - crypto: algif_hash - fix double free in hash_accept - CVE-2025-38079
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-38350
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-38350
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-38350
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race - CVE-2025-38085
  - mm/hugetlb: unshare page tables during VMA split, not before - CVE-2025-38084
  - tools/testing/vma: add missing function stub
  - mm: fix copy_vma() error handling for hugetlb mappings
  - PCI: Use downstream bridges for distributing resources
  - PCI/pwrctrl: Cancel outstanding rescan work when unregistering - CVE-2025-38137
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.28.1.el10_0]
changelog:
  - Conflict with xdp-tools < 1.5.4
  - Bump internal version to 55.28.1
  - tls: always refresh the queue when reading sock - CVE-2025-38471
  - selftests: net: bpf_offload: add 'libbpf_global' to ignored maps
  - selftests: net: fix error message in bpf_offload
  - selftests: net: add more info to error in bpf_offload
  - net: fix udp gso skb_segment after pull from frag_list - CVE-2025-38124
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - s390/pci: Serialize device addition and removal
  - s390/pci: Allow re-add of a reserved but not yet removed device
  - s390/pci: Prevent self deletion in disable_slot()
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device()
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
  - s390/pci: Fix missing check for zpci_create_device() error return
  - s390/pci: Fix potential double remove of hotplug slot
  - s390/topology: Improve topology detection
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() - CVE-2025-38250
  - selftests/bpf: Adjust data size to have ETH_HLEN - CVE-2025-21867
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() - CVE-2025-21867
  - i2c/designware: Fix an initialization issue - CVE-2025-38380


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.25.1.el10_0]
changelog:
  - Bump internal version to 55.25.1
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - CVE-2025-38022
  - RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
  - nvme-tcp: sanitize request list handling - CVE-2025-38264
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
  - tcp: adjust rcvq_space after updating scaling ratio
  - ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
  - ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
  - net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
  - padata: avoid UAF for reorder_work - CVE-2025-21726
  - padata: fix UAF in padata_reorder - CVE-2025-21727
  - padata: add pd get/put refcnt helper
  - padata: fix sysfs store callback check
  - padata: Clean up in padata_do_multithreaded()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove -CVE-2025-22020


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.29.1.el10_0]
changelog:
  - Bump internal version to 55.29.1
  - ice: fix eswitch code memory leak in reset scenario - CVE-2025-38417
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - net_sched: ets: Fix double list add in class with netem as child qdisc - CVE-2025-37914
  - sch_ets: make est_qlen_notify() idempotent
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw - CVE-2025-38200
  - cxgb4: use port number to set mac addr


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.30.1.el10_0]
changelog:
  - tipc: Fix use-after-free in tipc_conn_close(). - CVE-2025-38464
  - Bump internal version to 55.30.1
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - CVE-2025-37823
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
  - s390/pci: Fix handling of isolated VFs
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
  - s390/pci: Fix SR-IOV for PFs initially in standby
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - CVE-2025-38211
  - udp: Fix memory accounting leak. - CVE-2025-22058
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
  - ext4: only dirty folios when data journaling regular files - CVE-2025-38220
  - vsock: Fix transport_* TOCTOU - CVE-2025-38461
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry - CVE-2025-38472


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.31.1.el10_0]
changelog:
  - Adjust sched/fair: Adhere to place_entity() constraints
  - Bump internal version to 55.31.1
  - sched/fair: Adhere to place_entity() constraints
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero
  - net/sched: ets: use old 'nbands' while purging unused classes - CVE-2025-38350
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - net_sched: ets: fix a race in ets_qdisc_change() - CVE-2025-38107
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-37953
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-37798
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-37932
  - drm/vkms: Fix use after free and double free on init error - CVE-2025-22097
  - Revert "cxl/acpi: Fix load failures due to single window creation failure"
  - udmabuf: fix a buf size overflow issue during udmabuf creation - CVE-2025-37803
  - drm/framebuffer: Acquire internal references on GEM handles - CVE-2025-38449
  - drm/gem: Acquire references on GEM handles for framebuffers - CVE-2025-38449
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
  - nvme-ioctl: fix leaked requests on mapping error


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.32.1.el10_0]
changelog:
  - Bump internal version to 55.32.1
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() - CVE-2025-38352


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.33.1.el10_0]
changelog:
  - Fix kABI for net_namespace.h
  - Bump internal version to 55.33.1
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface - CVE-2025-38500
  - idpf: convert control queue mutex to a spinlock - CVE-2025-38392
  - eth: bnxt: fix missing ring index trim on error path - CVE-2025-37873
  - tcp: Correct signedness in skb remaining space calculation - CVE-2025-38463
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() - CVE-2025-38550
  - redhat: selftests/bpf: Add cpuv4 variant
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards - CVE-2025-38200
  - use uniform permission checks for all mount propagation changes - CVE-2025-38498
  - do_change_type(): refuse to operate on unmounted/not ours mounts - CVE-2025-38498
  - ublk: make sure ubq->canceling is set when queue is frozen - CVE-2025-22068
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
  - scsi: lpfc: Use memcpy() for BIOS version - CVE-2025-38332
  - net: introduce per netns packet chains


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.34.1.el10_0]
changelog:
  - Bump internal version to 55.34.1
  - sunrpc: fix handling of server side tls alerts - CVE-2025-38566
  - i40e: When removing VF MAC filters, only check PF-set MAC
  - usb: dwc3: gadget: check that event count does not exceed event buffer length - CVE-2025-37810


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.37.1.el10_0]
changelog:
  - fix kABI build errors
  - Adjust new tls selftest for current code
  - Bump internal version to 55.37.1
  - selftests: tls: add tests for zero-length records - CVE-2025-39682
  - tls: fix handling of zero-length records on the rx_list - CVE-2025-39682
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass - CVE-2025-38396
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure - CVE-2025-39698
  - ice: use fixed adapter index for E825C embedded devices
  - ice: use DSN instead of PCI BDF for ice_adapter index
  - tcp: drop secpath at the same time as we currently drop dst
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code
  - cifs: Fix the smbd_response slab to allow usercopy - CVE-2025-38523
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
  - smb: client: make use of common smbdirect_socket_parameters
  - smb: smbdirect: introduce smbdirect_socket_parameters
  - smb: client: make use of common smbdirect_socket
  - smb: smbdirect: add smbdirect_socket.h
  - smb: client: make use of common smbdirect.h
  - smb: smbdirect: add smbdirect.h with public structures
  - smb: client: make use of common smbdirect_pdu.h
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions
  - s390/sclp: Fix SCCB present check - CVE-2025-39694
  - net: stmmac: fix TSO DMA API usage causing oops
  - smb: client: fix use-after-free in cifs_oplock_break - CVE-2025-38527


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.31.1.el10_0]
changelog:
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero (Phil Auld) [RHEL-91404]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
  - drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
  - Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
  - drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.32.1.el10_0]
changelog:
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.33.1.el10_0]
changelog:
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109530] {CVE-2025-38500}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106061] {CVE-2025-38392}
  - eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104564] {CVE-2025-37873}
  - tcp: Correct signedness in skb remaining space calculation (CKI Backport Bot) [RHEL-107844] {CVE-2025-38463}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111154] {CVE-2025-38550}
  - redhat: selftests/bpf: Add cpuv4 variant (Viktor Malik) [RHEL-109928]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105138] {CVE-2025-38200}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-99437] {CVE-2025-22068}
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM JIRA: https://issues.redhat.com/browse/RHEL-109821 Y-JIRA: https://issues.redhat.com/browse/RHEL-79173 (Jakub Ramaseuski)
  - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105936] {CVE-2025-38332}
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88923]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.34.1.el10_0]
changelog:
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
  - i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.35.1.el10_0]
changelog:
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
  - cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
  - smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.36.1.el10_0]
changelog:
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
  - ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
  - ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.37.1.el10_0]
changelog:
  - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.38.1.el10_0]
changelog:
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
  - net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
  - net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
  - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
  - net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.39.1.el10_0]
changelog:
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.40.1.el10_0]
changelog:
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
  - s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
  - s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
  - s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
  - net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
  - enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
  - enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
  - enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
  - enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
  - enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
  - enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
  - enic: enic rq code reorg (John Meneghini) [RHEL-106602]
  - enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
  - enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
  - enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
  - enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
  - enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
  - enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
  - enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
  - enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
  - enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
  - enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
  - enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
  - enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
  - enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
  - enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
  - scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
  - scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
  - scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
  - scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
  - scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.41.1.el10_0]
changelog:
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
  - erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
  - s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
  - NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
  - mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.42.1.el10_0]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
  - KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
  - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
  - cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.43.1.el10_0]
changelog:
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
  - igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
  - igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
  - igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
  - igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
  - igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
  - igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
  - igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
  - coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
  - cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
  - x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
  - x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-92175]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
  - module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
  - module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
  - Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
  - module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
  - execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
  - execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
  - x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
  - x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
  - x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
  - module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
  - x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
  - alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
  - alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
  - maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
  - x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
  - execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
  - x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
  - arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
  - module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
  - asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
  - mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
  - mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-115351]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
  - ice: use string choice helpers (Petr Oros) [RHEL-115351]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.3.1.el10_0]
changelog:
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204]
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568]
  - uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149]


author: Andrew Lukoshko <alukoshko@almalinux.org> [6.12.0-55.9.1.el10_0]
changelog:
  - redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
  - Merge: Add symbols to stablelist and enable check-kabi (Jan Stancek) [RHEL-79881]
  - Merge tag 'kernel-6.12.0-55.9.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.7.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.4.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.3.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.2.1.el10_0' into main (Jan Stancek)
  - Merge tag 'kernel-6.12.0-55.1.1.el10_0' into main (Jan Stancek)


author: Rado Vrbovsky <rvrbovsk@redhat.com> 0.9.7-20
changelog:
  - Rebase kpatch with upstream to v0.9.10 (RHEL-113127)
  - Provide a list of CVEs currently patched using live patches (RHEL-106283)


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-10
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171588 RHEL-171597


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.21.3-111
changelog:
  - resolves: RHEL-101762 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.21.3-106)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-108
changelog:
  - Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
    CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
  - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
  - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
  - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Eduard Abdullin <eabdullin@almalinux.org> - 14.3.1-4.4.alma.2
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Fix sysroot packages for i686 architecture


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.6.1-1
changelog:
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: drop Fedora from testing OSes (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2.10.2-3.3
changelog:
  - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.11.1-2.1
changelog:
  - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows
    privilege escalation on AD-joined Linux systems [rhel-10.1.z]


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: - Tomas Halman <thalman@redhat.com> - 2.12.0-3.1
changelog:
  - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
  - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-2
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127092)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Jan Macku <jamacku@redhat.com> 1.68.0-3.2
changelog:
  - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-11.1
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329)
  - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.1
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131422)
  - CVE-2025-65018: heap buffer overflow (RHEL-131435)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133212)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.2
changelog:
  - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148323)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148818)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146645)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.4
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161324)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-3
changelog:
  - Backport CVE fixes from 0.12.2
    Resolves: RHEL-213004
    Resolves: RHEL-213029
    Resolves: RHEL-213032
    Resolves: RHEL-213039
    Resolves: RHEL-213046
    Resolves: RHEL-213079
    Resolves: RHEL-213112
    Resolves: RHEL-213117
    Resolves: RHEL-213148
    Resolves: RHEL-213150
    Resolves: RHEL-213175


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Patsy Griffin <patsy@redhat.com> - 6.06-13
changelog:
  - suffixes(7): Add zstd format to the suffixes file core(5): Document dump
    file format change from lz4 format to zstd format


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67335):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79184,
    RHEL-79185, RHEL-79188, RHEL-79189, RHEL-79191, RHEL-79193, RHEL-79203):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000390;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-08/0xe0 microcode at revision 0x4123;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x100 up to 0x102;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
    (RHEL-94853)
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-91227, RHEL-91242, RHEL-91234):
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb8 up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfc up to 0x100;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x102 up to 0x104;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9;


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250211-1.20250812.1
changelog:
  - Update Intel CPU microcode to microcode-20250812 release
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-58
changelog:
  - Update to upstream 2.1-42. 20231114
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xac up to 0xb4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode from revision 0x2e
      up to 0x32.
  - Addresses CVE-2023-23583


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1.20251111-1
changelog:
  - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
    (RHEL-123517)
  - Update Intel CPU microcode to microcode-20251111 release (RHEL-128195)
    - Addition of 06-ae-01/0x97 microcode at revision 0x1000273;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000401 up to 0x2c000410;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x3a
      up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x437 up to 0x43a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x437 up to 0x43a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x437 up to 0x43a;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0xa up
      to 0xb;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x437
      up to 0x43a;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa000100 up to 0xa000124;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003d0 up to 0x10003f0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000362
      up to 0x3000382;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12f up
      to 0x132;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12f up to 0x132;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4129 up to 0x6133;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4129
      up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4129 up to 0x6133;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x123 up
      to 0x125;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1d up
      to 0x1e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x119 up
      to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x119 up to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002b3 up to 0x210002c0;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002b3
      up to 0x210002c0.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1.20260210-1
changelog:
  - Update Intel CPU microcode to microcode-20260210 release (RHEL-150997)
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-6a-06/87: Ice Lake-X: d000410 to d000421
    06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
    06-7e-05/80: Ice Lake-L: 00ca to 00cc
    06-8c-01/80: Tiger Lake: 00bc to 00be
    06-8c-02/c2: Tiger Lake: 003c to 003e
    06-8d-01/c2: Tiger Lake-H: 0056 to 0058
    06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
    06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
    06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
    06-97-02/07: Alder Lake: 003d to 003e
    06-97-05/07: Alder Lake: 003d to 003e
    06-9a-03/80: Alder Lake-L: 043a to 043b
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
    06-9a-04/80: Alder Lake-L: 043a to 043b
    06-a7-01/02: Rocket Lake: 0064 to 0065
    06-aa-04/e6: Meteor Lake-L: 0025 to 0028
    06-ad-01/20: Granite Rapids-X: a000124 to a000133
    06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
    06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
    06-b5-00/80: Arrow Lake-U: 000a to 000d
    06-b7-01/32: Raptor Lake: 0132 to 0133
    06-ba-02/e0: Raptor Lake-P: 6133 to 6134
    06-ba-03/e0: Raptor Lake-P: 6133 to 6134
    06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
    06-bf-02/07: Raptor Lake-S: 003d to 003e
    06-bf-05/07: Raptor Lake-S: 003d to 003e
    06-c5-02/82: Arrow Lake-H: 011a to 011b
    06-c6-02/82: Arrow Lake: 011a to 011b
    06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
  Resolves: RHEL-150997


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20260512-1
changelog:
  - Update Intel CPU microcode to microcode-20260512 release (RHEL-176251)
  - New microcode files (in hex):
    06-cc-02: Panther Lake: revision 011b
    06-cc-03: Panther Lake: revision 011b
  - Microcode files (/platform_mask shown) with revision updates (in hex):
    06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000670
    06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000670
    06-ad-01/20: Granite Rapids-X: a000133 to a000142
    06-ad-01/95: Granite Rapids-X: 1000405 to 1000423
    06-ae-01/97: Granite Rapids-D: 10002f3 to 1000307
    06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003a3
    06-bd-01/80: Lunar Lake: 0125 to 0126
    06-c5-02/82: Arrow Lake-H: 011b to 0121
    06-c6-02/82: Arrow Lake: 011b to 0121
    06-cf-02/87: Emerald Rapids: 210002d3 to 210002e0
  Resolves: RHEL-176251


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.25.0-5.1
changelog:
  - Fix unwrapping of attribute bound EC keys
  - Fix private secure key blob import
    Resolves: RHEL-131645


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-12
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128397
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128387


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-13
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155811


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-14
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164738
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166237
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166221
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166189
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166205


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-21
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155812


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164739
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166238
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166222
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166190
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166206


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-24
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-186435
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185826
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185852


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: RHEL-193170
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: RHEL-193016


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16.3
changelog:
  - Stop declaring presence of version 3_4_0 despite having some symbols from it
    Resolves: RHEL-105518


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-7
changelog:
  - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
    CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
    CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
    Resolves: RHEL-142062
    Resolves: RHEL-141985
    Resolves: RHEL-142053
    Resolves: RHEL-142049
    Resolves: RHEL-142045
    Resolves: RHEL-142041
    Resolves: RHEL-142037
    Resolves: RHEL-142033
    Resolves: RHEL-142029
    Resolves: RHEL-142008
    Resolves: RHEL-142025
    Resolves: RHEL-142021


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-4
changelog:
  Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
  CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
  CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
  CVE-2026-34182.
  Resolves: RHEL-179267
  Resolves: RHEL-179281
  Resolves: RHEL-179537
  Resolves: RHEL-179542
  Resolves: RHEL-179545
  Resolves: RHEL-179550
  Resolves: RHEL-179553
  Resolves: RHEL-179626
  Resolves: RHEL-179658
  Resolves: RHEL-179675
  Resolves: RHEL-179682
  Resolves: RHEL-179685
  Resolves: RHEL-179689
  Resolves: RHEL-179693
  Resolves: RHEL-179697


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-512.1
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87185


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-3.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143054 RHEL-143105 RHEL-144852


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.9-2.2
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  - Enable PAC and BTI hardware protections for aarch64
  - Resolves: RHEL-98059, RHEL-98046, RHEL-97812, RHEL-98061, RHEL-98179, RHEL-98865


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-2.1
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-139387


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-3
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142737, RHEL-137215, RHEL-142755


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.19-4
changelog:
  - Security fix for CVE-2026-44431
  - Security fix for CVE-2026-44432
  Resolves: RHEL-184817, RHEL-185121


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
changelog:
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling


author: Michal Ruprich <mruprich@redhat.com> - 3.4.4-1
changelog:
  - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4
  - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518)
  - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618)


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.19-1
changelog:
  - Allow systemd-journald getattr nsfs files
  Resolves: RHEL-71803
  - Allow systemd-related domains getattr nsfs files
  Resolves: RHEL-71803


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.20-1
changelog:
  - Allow virtqemud domain transition on numad execution
  Resolves: RHEL-65789
  - Support virt live migration using ssh
  Resolves: RHEL-53972
  - Allow ssh_t read systemd config files
  Resolves: RHEL-53972
  - Allow virtqemud permissions needed for live migration
  Resolves: RHEL-43217
  - Allow virtqemud the getpgid process permission
  Resolves: RHEL-46357
  - Allow virtqemud manage nfs dirs when virt_use_nfs boolean is on
  Resolves: RHEL-71068
  - Allow virtqemud relabelfrom virt_log_t files
  Resolves: RHEL-48236
  - Allow virtqemud relabel tun_socket
  Resolves: RHEL-71394
  - Allow gnome-remote-desktop dbus chat with policykit
  Resolves: RHEL-35877
  - Update ktlsh policy
  Resolves: RHEL-42672
  - Confine the ktls service
  Resolves: RHEL-42672
  - Allow request-key to read /etc/passwd
  Resolves: RHEL-71490
  - Allow request-key to manage all domains' keys
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
changelog:
  - Allow init create vsock socket for sshd
  Resolves: RHEL-72549
  - Support ssh connections via systemd-ssh-generator
  Resolves: RHEL-72549
  - Allow ssh generator work with systemd unit files
  Resolves: RHEL-72549
  - Confine systemd system-ssh-generator
  Resolves: RHEL-72549
  - Allow login_userdomain getattr nsfs files
  Resolves: RHEL-72549
  - Allow virtqemud send a generic signal to the ssh client domain
  Resolves: RHEL-53972
  - Add the auth_dontaudit_read_passwd_file() interface
  Resolves: RHEL-71490
  - Dontaudit request-key read /etc/passwd
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
changelog:
  - Allow staff user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-69118
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-69118
  - Allow svirt_t read sysfs files
  Resolves: RHEL-71270
  - Label /dev/pmem[0-9]+ with fixed_disk_device_t
  Resolves: RHEL-71656
  - Add support for the KVM guest memfd anon inodes
  Resolves: RHEL-69128
  - Allow sysadm user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-71665
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-71665


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.23-1
changelog:
  - Remove the lockdown class from the policy
  Resolves: RHEL-36741
  - Remove socket from unconfined_domain_type allow rule
  Resolves: RHEL-36741
  - Include key_socket in socket_class_set
  Resolves: RHEL-36741


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.24-1
changelog:
  - Allow systemd-generator connect to syslog over a unix datagram socket
  Resolves: RHEL-75879
  - Allow ssh_t to change role to system_r
  Resolves: RHEL-53972
  - Allow virtnodedev create /etc/mdevctl.d/scripts.d with bin_t type
  Resolves: RHEL-39893
  - Allow virtqemud manage fixed disk device nodes
  Resolves: RHEL-71656
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72861
  - Allow systemd-machined read the vsock device
  Resolves: RHEL-74280
  - Allow pcmsensor write nmi_watchdog state information
  Resolves: RHEL-52838
  - Label /proc/sys/kernel/nmi_watchdog with sysctl_nmi_watchdog_t
  Resolves: RHEL-52838


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
changelog:
  - Update ktlshd policy to read /proc/keys and domain keyrings
  Resolves: RHEL-42672
  - Allow pcmsensor read nmi_watchdog state information
  Resolves: RHEL-52838
  - Support peer-to-peer migration of vms using ssh
  Resolves: RHEL-77351
  - Allow virt_domain read hardware state information unconditionally
  Resolves: RHEL-71270
  - Allow timemaster write to sysfs files
  Resolves: RHEL-44637
  - Allow virtqemud map svirt_image_t plain files
  Resolves: RHEL-40080
  - Allow virtqemud unmount a filesystem with extended attributes
  Resolves: RHEL-40080
  - Allow virtqemud work with nvdimm devices
  Resolves: RHEL-71656
  - Update virtqemud policy regarding the svirt_tcg_t domain
  Resolves: RHEL-71270
  - Allow virtqemud use hostdev usb devices conditionally
  Resolves: RHEL-74230
  - Support saving and restoring a VM to/from a block device
  Resolves: RHEL-76138
  - Allow virtnwfilterd dbus chat with firewalld
  Resolves: RHEL-76138
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-62763
  - Allow virtstoraged write to sysfs files
  Resolves: RHEL-44637
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-54019
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77114
  - Allow init mounton crypto sysctl files
  Resolves: RHEL-56250


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
changelog:
  - Rename winbind_rpcd_* types to samba_dcerpcd_*
  Resolves: RHEL-14759
  - Allow samba-dcerpcd work with ctdb cluster
  Resolves: RHEL-14759
  - Revert "Remove socket from unconfined_domain_type allow rule"
  Resolves: RHEL-77327
  - Dontaudit access of virt-related permissive domains
  Resolves: RHEL-77808
  - Add selinux_requires_min macro
  Resolves: RHEL-54715
  - Filter out EPEL related modules
  Resolves: RHEL-73505


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


