# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.49.1.el10_1]
changelog:
  - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.50.1.el10_1]
changelog:
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
  - cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
  - netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
  - netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
  - netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
  - netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
  - netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
  - netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
  - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.53.1.el10_1]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.54.1.el10_1]
changelog:
  - thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
  - thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
  - thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.55.1.el10_1]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.56.1.el10_1]
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.el10]
changelog:
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Frank Liang) [RHEL-107449]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41234]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-103981]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106663] {CVE-2025-38464}
  - sched/deadline: Fix accounting after global limits change (Phil Auld) [RHEL-105980]
  - tools/sched: Add root_domains_dump.py which dumps root domains info (Phil Auld) [RHEL-105980]
  - tools/sched: Add dl_bw_dump.py for printing bandwidth accounting info (Phil Auld) [RHEL-105980]
  - sched/deadline: Initialize dl_servers after SMP (Phil Auld) [RHEL-105980]
  - sched/deadline: Less agressive dl_server handling (Phil Auld) [RHEL-105980]
  - sched/deadline: Reset extra_bw to max_bw when clearing root domains (Phil Auld) [RHEL-105980]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-105980]
  - sched/fair: Always trigger resched at the end of a protected period (Phil Auld) [RHEL-105980]
  - sched/fair: Fix entity's lag with run to parity (Phil Auld) [RHEL-105980]
  - sched/fair: Limit run to parity to the min slice of enqueued entities (Phil Auld) [RHEL-105980]
  - sched/fair: Remove spurious shorter slice preemption (Phil Auld) [RHEL-105980]
  - sched/fair: Fix NO_RUN_TO_PARITY case (Phil Auld) [RHEL-105980]
  - sched: Cancel the slice protection of the idle entity (Phil Auld) [RHEL-105980]
  - sched/fair: Use protect_slice() instead of direct comparison (Phil Auld) [RHEL-105980]
  - sched/deadline: Fix dl_server runtime calculation formula (Phil Auld) [RHEL-105980]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-105980]
  - sched: Fix preemption string of preempt_dynamic_none (Phil Auld) [RHEL-105980]
  - sched/debug: Print the local group's asym_prefer_cpu (Phil Auld) [RHEL-105980]
  - cpufreq/amd-pstate: Update asym_prefer_cpu when core rankings change (Phil Auld) [RHEL-105980]
  - sched/topology: Introduce sched_update_asym_prefer_cpu() (Phil Auld) [RHEL-105980]
  - sched/fair: Use READ_ONCE() to read sg->asym_prefer_cpu (Phil Auld) [RHEL-105980]
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104286] {CVE-2025-38211}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-124.1.1.el10_1]
changelog:
  - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880]
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352}
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106441] {CVE-2025-38472}
  - netfilter: nf_tables: hide clash bit from userspace (Florian Westphal) [RHEL-106441]
  - selftests: netfilter: conntrack_resize.sh: extend resize test (Florian Westphal) [RHEL-106441]
  - redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov) [RHEL-109610]
  - redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov) [RHEL-109610]
  - redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov) [RHEL-109610]
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111072] {CVE-2025-38566}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111905]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110814] {CVE-2025-38571}
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105134]
  - kselftests/mm: fix khugepaged build broken (Chunyu Hu) [RHEL-112084]
  - iommu/virtio: Make instance lookup robust (Eric Auger) [RHEL-108207]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108262]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108262]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109604]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109604]
  - redhat: set defaults for RHEL 10.1 (Julio Faracco)


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-124.2.1.el10_1]
changelog:
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556}
  - Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491]
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782]
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893]
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83893]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047}
  - x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-124.3.1.el10_1]
changelog:
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-84762]
  - octeon_ep: Fix host hang issue during device reboot (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058]
  - octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058]
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058]
  - octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-90058]
  - net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-90058]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114338] {CVE-2025-39698}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CKI Backport Bot) [RHEL-106587] {CVE-2025-38468}
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Audra Mitchell) [RHEL-106609] {CVE-2025-38369}
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107023]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-124.4.1.el10_1]
changelog:
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113251] {CVE-2025-38572}
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114710] {CVE-2025-39761}
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109531] {CVE-2025-38500}
  - net: add reserved fields to devlink_port_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_health_reporter_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_port_region_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_region_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_param (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_dpipe_table_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_linecard_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_port (Ivan Vecera) [RHEL-111907]
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111156] {CVE-2025-38550}
  - tcp: Correct signedness in skb remaining space calculation (Florian Westphal) [RHEL-107843] {CVE-2025-38463}
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-111791]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.3.1.el10_0]
changelog:
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-41204]
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71568]
  - uki: enable FIPS mode (Vitaly Kuznetsov) [RHEL-80149]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.4.1.el10_0]
changelog:
  - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925 (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (Bastien Nocera) [RHEL-79457] {CVE-2024-56653}
  - Bluetooth: btmtk: adjust the position to init iso data anchor (Bastien Nocera) [RHEL-79457] {CVE-2024-53238}
  - Bluetooth: btusb: mediatek: change the conditions for ISO interface (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Bastien Nocera) [RHEL-79457] {CVE-2024-56757}
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (Bastien Nocera) [RHEL-79457]
  - Bluetooth: btusb: mediatek: move Bluetooth power off command position (Bastien Nocera) [RHEL-79457]
  - redhat/configs: Enable Mediatek Bluetooth USB drivers (Bastien Nocera) [RHEL-79457]
  - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-76090] {CVE-2024-56623}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-76089] {CVE-2024-56631}
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78975] {CVE-2025-1272}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.5.1.el10_0]
changelog:
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79110] {CVE-2025-21694}
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80387]
  - kernel.spec: add missing tools-libs on s390x (Jan Stancek) [RHEL-81118]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77270]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.6.1.el10_0]
changelog:
  - nfs: Fix oops in nfs_netfs_init_request() when copying to cache (Olga Kornievskaia) [RHEL-77295] {CVE-2024-57927}
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-80112]
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-79087]
  - configs: enable FW_CACHE on centos-stream/rhel 10 for nouveau (Dave Airlie) [RHEL-80281]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.7.1.el10_0]
changelog:
  - Enable Intel VPU driver for RHEL (Fabien Dupont) [RHEL-38582]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80226]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-82677 RHEL-80534]
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_release_desc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_fill_cb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_can_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xp_alloc_batch to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_return_buff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_flush_frame_bulk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_io_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vzalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vmalloc_array_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __trace_trigger_soft_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_print_bitmask_seq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_set_clr_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol trace_array_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_encrypt_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tls_device_sk_destruct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_shutdown to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tcp_gro_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_unbound_wq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_obj_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol switchdev_handle_port_attr_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol strcasecmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol starget_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol slab_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_skb_reason_drop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_gso_segment to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_expand to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol skb_add_rx_frag_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_pcopy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_nents to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_miter_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sg_copy_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_memory_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __seq_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol secpath_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_unblock_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_scan_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_sanitize_inquiry_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_rescan_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_target to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_print_command to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_normalize_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __scsi_iterate_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_host_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_get_vpd_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_unmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_dma_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_set_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_device_from_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_build_sense to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_block_requests to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol scmd_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout_uninterruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_rphy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_alloc_num to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_phy_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_expander_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_end_device_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol sas_ata_ncq_prio_supported to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_start_check to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_walk_enter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_init_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol reset_devices to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware_nowait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_limits_commit_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __put_devmap_managed_folio_refs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pm_runtime_idle to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_validate_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_support_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start_aneg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_max_speed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_set_asym_pause to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_ethtool_ksettings_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_disconnect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_connect to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol phy_attached_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcpu_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcix_set_mmrbc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_write_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_find_ro_info_keyword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_check_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vpd_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_try_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_reset_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_vpd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_iomap_regions to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcim_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_irq_get_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_domain_bus_and_slot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_set_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_get_readrq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_write_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_unlocked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pcie_capability_clear_and_set_word_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_rom to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_mwi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_choose_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_ullong to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_put_unrefed_netmem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_disable_direct_recycling to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_pool_alloc_frag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_unregister_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_register_targetport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_rcv_fcp_abort to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvmet_fc_invalidate_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_unregister_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_set_remoteport_devloss to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rescan_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_remoteport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_register_localport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nvme_fc_io_getuuid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_tso_max_segs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_receive_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_queue_set_napi to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_get_num_default_rss_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim_get_rx_moderation to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_walk_all_upper_dev_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_core_stats_inc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __netdev_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __napi_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_read_raw_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_powm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_get_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mpi_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_uplink_netdev_event_replay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_core_access_reg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mlx5_blocking_notifier_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_create_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mempool_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user_nul to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_toio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy_fromio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol memchr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __mdiobus_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_get_phy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_c45_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol mdio45_probe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol local_clock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_del_entry_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __list_add_valid_or_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libie_rx_pt_lut to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_recycle_slow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol libeth_rx_fq_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get_raw_ts64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ksize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol krealloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmemdup_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmem_cache_create_args to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmem_cache_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_size_roundup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_large_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __kmalloc_cache_node_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree_sensitive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iter_div_u64_rem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_set_affinity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_sched to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_poll_complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_modify_status to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ipv6_ext_hdr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip_compute_csum to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __iowrite64_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __ioread32_copy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __inet6_lookup_established to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_write_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_smbus_read_byte_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_new_client_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_del_adapter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol i2c_bit_add_bus to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_notify_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hwmon_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_zeroed_page_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_u16 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_free_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol get_cpu_idle_time to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fortify_panic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_tcp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_l2tpv3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_icmp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_opts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fixed_size_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_terminate to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_vport_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remove_host to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_rolechg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_delete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_remote_port_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_release_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_vendor_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_post_event to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_host_fpin_rcv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_get_event_number to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_timed_out to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_eh_should_retry_cmd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_scsi_eh to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_block_rport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fc_attach_transport to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol fasync_helper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_rxfh_context_lost to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_puts to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_params_from_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_forced_speed_maps_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_device to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dma_sync_single_for_cpu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_sg_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_get_required_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq_nosync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_trans_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_printk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_notice to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_region_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_port_fn_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_nested_devlink_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_info_board_serial_number_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_recovery_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_wakeup_disable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_show_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_set_wakeup_capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_initialize to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_mod to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_create_devm_seqfile to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_prio_dscp_mask_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_getapp_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol current_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc_t10dif to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_next_wrap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_remove_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_state_add_instance to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol const_pcpu_hot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol class_create to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol byte_rev_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_update to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_remove to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_lookup to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_last to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_insert to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_get_prev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo64 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_geo32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol btree_destroy to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_setup_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_remove_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bsg_job_done to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run8 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_queue_rq_timeout to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_unique_tag to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_tagset_busy_iter to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_pci_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol blkcg_get_fc_appid to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _bin2bcd to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_thaw to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_freeze to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol __alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_cpumask_var_node to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-79881]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-79881]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.9.1.el10_0]
changelog:
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-80306] {CVE-2024-57901}
  - redhat: kabi: update stablelist checksums (Čestmír Kalina) [RHEL-80552]
  - shrinker: include rh_kabi.h (Čestmír Kalina) [RHEL-80552]
  - redhat: pad the folio_batch struct (Nico Pache) [RHEL-80552]
  - redhat: pad the lruvec structure for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the zone structures for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the wait_page_queue for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the lru_gen functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vmem_altmap struct for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the vm_fault structure (Nico Pache) [RHEL-80552]
  - redhat: pad the tlbflush_unmap_batch struct for the KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the swap_cluster_info structure for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrinker struct for KABI (Nico Pache) [RHEL-80552]
  - redhat: pad the shrink_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the readahead_control structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the pglist_data structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the percpu structures (Nico Pache) [RHEL-80552]
  - redhat: pad the page_frag_cache for the kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the ns_common structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mmu_notifier functions for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the mm_struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempool_s structure for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad mempolicy struct for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the memory_failure_stats for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache_args struct (Nico Pache) [RHEL-80552]
  - redhat: pad the kmem_cache structure (Nico Pache) [RHEL-80552]
  - redhat: pad ip_conntrack_stat for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the free_area struct (Nico Pache) [RHEL-80552]
  - redhat: pad follow_pfnmap_args for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad anon_vma for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad access_coordinate for kabi (Nico Pache) [RHEL-80552]
  - redhat: pad the deferred_split queue for the kabi checker (Nico Pache) [RHEL-80552]
  - redhat: hide capture_control from kabi checker (Nico Pache) [RHEL-80552]
  - mm/memcg: Exclude mem_cgroup/obj_cgroup pointer from kABI signature computation (Waiman Long) [RHEL-80552]
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75653] {CVE-2025-21663}
  - Revert "smb: client: fix chmod(2) regression with ATTR_READONLY" (Jan Stancek)


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.18.1.el10_0]
changelog:
  - Import config changes from Centos Stream kernel kernel-6.12.0-77.el10
  - Bump internal version to 55.18.1
  - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
  - sched/rt: Fix race in push_rt_task MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit
  - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation - upstream CVE-2024-56559
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
  - proc: fix UAF in proc_get_inode() CVE-2025-21999
  - ext4: ignore xattrs past end CVE-2025-37738
  - nvme-fabrics: handle zero MAXCMD without closing the connection
  - ext4: fix off-by-one error in do_split CVE-2025-23150
  - r8169: disable RTL8126 ZRX-DC timeout
  - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support
  - vmxnet3: unregister xdp rxq info in the reset path
  - block: fix 'kmem_cache of name 'bio-108' already exists'
  - ice: implement low latency PHY timer updates
  - ice: check low latency PHY timer update firmware capability
  - ice: add lock to protect low latency interface
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_*
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810
  - cifs: Fix integer overflow while processing acdirmax mount option CVE-2025-21963
  - smb: client: fix UAF in decryption with multichannel CVE-2025-37750
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - keys: Fix UAF in key_put() CVE-2025-21893
  - ndisc: use RCU protection in ndisc_alloc_skb() CVE-2025-21764
  - ipv6: use RCU protection in ip6_default_advmss() CVE-2025-21765
  - net: add dev_net_rcu() helper CVE-2025-21765
  - vfio/pci: Align huge faults to order
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del CVE-2025-21969
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd CVE-2025-21969
  - cifs: Fix integer overflow while processing closetimeo mount option CVE-2025-21962
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up CVE-2025-21887
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails CVE-2025-21979
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy CVE-2025-21979
  - net: fix geneve_opt length integer overflow CVE-2025-22055
  - vsock/virtio: discard packets if the transport changes CVE-2025-21669
  - net: gso: fix ownership in __udp_gso_segment CVE-2025-21926
  - xsk: fix an integer overflow in xp_create_and_assign_umem() CVE-2025-21997
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi CVE-2025-37943
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list CVE-2025-21919
  - drm/i915/display: Use joined pipes in dsc helpers for slices, bpp - upstream
  - drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size - upstream
  - drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc - upstream
  - drm/i915/display: Simplify intel_joiner_num_pipes and it's usage - upstream
  - drm/i915/display: Check whether platform supports joiner - upstream
  - Revert drm/i915/dp_mst: Handle error during DSC BW overhead/slice
  - Revert drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC
  - drm/mgag200: Added support for the new device G200eH5 - upstream
  - cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21964
  - ext4: fix OOB read when checking dotdot dir CVE-2025-37785
  - vsock: Orphan socket after transport release CVE-2025-21756
  - vsock: Keep the binding until socket destruction CVE-2025-21756
  - bpf, vsock: Invoke proto::close on close() CVE-2025-21756
  - idpf: call set_real_num_queues in idpf_open
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format CVE-2024-53104
  - redhat: enable CONFIG_WERROR=y
  - redhat: don't enforce WERROR for 3rd-party OOT kmods
  - redhat: make ENABLE_WERROR enable also KVM_WERROR
  - fortify: Hide run-time copy size from value range tracking
  - resolve_btfids: Fix compiler warnings
  - ixgbe: fix media cage present detection for E610 device
  - ixgbe: fix media type detection for E610 device
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - ixgbe: Enable link management in E610 device
  - ixgbe: Clean up the E610 link management related code
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection
  - ixgbe: Add support for EEPROM dump in E610 device
  - ixgbe: Add support for NVM handling in E610 device
  - ixgbe: Add link management support for E610 device
  - ixgbe: Add support for E610 device capabilities detection
  - ixgbe: Add support for E610 FW Admin Command Interface
  - smb: client: don't retry IO on failed negprotos with soft mounts - pick from MR
  - scsi: core: Fix command pass through retry regression - cherry pick from MR
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature CVE-2025-21966
  - ice: stop storing XDP verdict within ice_rx_buf
  - ice: gather page_count()'s of each frag right before XDP prog call
  - ice: put Rx buffers after being done with current frame
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() CVE-2025-21993
  - smb: client: fix regression with guest option
  - pnfs/flexfiles: retry getting layout segment for reads
  - nfs: fix incorrect error handling in LOCALIO
  - nfs: probe for LOCALIO when v3 client reconnects to server
  - nfs: probe for LOCALIO when v4 client reconnects to server
  - nfs/localio: remove redundant code and simplify LOCALIO enablement
  - nfs_common: add nfs_localio trace events
  - nfs_common: track all open nfsd_files per LOCALIO nfs_client
  - nfs_common: rename nfslocalio nfs_uuid_lock to nfs_uuids_lock
  - nfsd: nfsd_file_acquire_local no longer returns GC'd nfsd_file
  - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_
  - nfsd: update percpu_ref to manage references on nfsd_net
  - nfs: cache all open LOCALIO nfsd_file(s) in client
  - nfs_common: move localio_lock to new lock member of nfs_uuid_t
  - nfs_common: rename functions that invalidate LOCALIO nfs_clients
  - nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
  - nfs/localio: add direct IO enablement with sync and async IO support
  - ice: ensure periodic output start time is in the future
  - ice: fix PHY Clock Recovery availability check
  - ice: Drop auxbus use for PTP to finalize ice_adapter move
  - ice: Use ice_adapter for PTP shared data instead of auxdev
  - ice: Initial support for E825C hardware in ice_adapter
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code
  - ice: Introduce ice_get_phy_model() wrapper
  - ice: Enable 1PPS out from CGU for E825C products
  - ice: Read SDP section from NVM for pin definitions
  - ice: Disable shared pin on E810 on setfunc
  - ice: Cache perout/extts requests and check flags
  - ice: Align E810T GPIO to other products
  - ice: Add SDPs support for E825C
  - ice: Implement ice_ptp_pin_desc
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() - modified CVE-2025-21927
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - smb: client: fix chmod(2) regression with ATTR_READONLY
  - mm/hugetlb: fix hugepage allocation for interleaved memory nodes
  - net: mana: use ethtool string helpers
  - net: mana: cleanup mana struct after debugfs_remove() - upstream
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
  - net: mana: Fix memory leak in mana_gd_setup_irqs
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
  - net: mana: Enable debugfs files for MANA device
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024
  - net: mana: Add get_link and get_link_ksettings in ethtool


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.19.1.el10_0]
changelog:
  - Clean git history at setup stage
  - Prevent kABI check error for BLK_CGROUP_PUNT_BIO
  - Bump internal version to 55.19.1
  - ibmvnic: Use kernel helpers for hex dumps
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - ice: Avoid setting default Rx VSI twice in switchdev setup
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - block/Kconfig: Allow selecting BLK_CGROUP_PUNT_BIO


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.19.1.0.1.el10_0.OL10]
changelog:
  - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
  - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
  - Disable UKI signing [Orabug: 36571828]
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Add Oracle Linux IMA certificates
  - Update module name for cryptographic module [Orabug: 37400433]


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.20.1.el10_0]
changelog:
  - Bump internal version to 55.20.1
  - Adjust page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - Adjust dm mpath: Interface for explicit probing of active paths
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes - CVE-2025-21991
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool
  - page_pool: Move pp_magic check into helper functions
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp - CVE-2025-37799
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq
  - dm-mpath: Don't grab work_mutex while probing paths
  - dm mpath: Interface for explicit probing of active paths
  - dm: Allow .prepare_ioctl to handle ioctls directly
  - ipv6: mcast: extend RCU protection in igmp6_send() - CVE-2025-21759


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.21.1.el10_0]
changelog:
  - Bump internal version to 55.21.1
  - ice, irdma: fix an off by one in error handling code
  - irdma: free iwdev->rf after removing MSI-X
  - ice: Fix signedness bug in ice_init_interrupt_scheme()
  - ice: init flow director before RDMA
  - ice: simplify VF MSI-X managing
  - ice: enable_rdma devlink param
  - ice: treat dyn_allowed only as suggestion
  - ice, irdma: move interrupts code to irdma
  - ice: get rid of num_lan_msix field
  - ice: remove splitting MSI-X between features
  - ice: devlink PF MSI-X max and min parameter
  - ice: ice_probe: init ice_adapter after HW init
  - ice: minor: rename goto labels from err to unroll
  - ice: split ice_init_hw() out from ice_init_dev()
  - ice: c827: move wait for FW to ice_init_hw()
  - exfat: fix random stack corruption after get_block - CVE-2025-22036


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.22.1.el10_0]
changelog:
  - Bump internal version to 55.22.1
  - mm/huge_memory: fix dereferencing invalid pmd migration entry - CVE-2025-37958
  - i2c: tegra: check msg length in SMBUS block read
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error - CVE-2025-38089
  - media: uvcvideo: Announce the user our deprecation intentions
  - media: uvcvideo: Allow changing noparam on the fly
  - media: uvcvideo: Invert default value for nodrop module param
  - media: uvcvideo: Propagate buf->error to userspace
  - media: uvcvideo: Flush the control cache when we get an event
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set
  - media: uvcvideo: Remove dangling pointers - CVE-2024-58002
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Fix double free in error path - CVE-2024-57980
  - wifi: iwlwifi: limit printed string from FW file - CVE-2025-21905


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.24.1.el10_0]
changelog:
  - Bump internal version to 55.24.1
  - net_sched: hfsc: Fix a UAF vulnerability in class handling - CVE-2025-37797
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - CVE-2025-22121
  - ext4: introduce ITAIL helper - CVE-2025-22121
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access - CVE-2025-38110
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() - CVE-2025-38088
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap - CVE-2025-38088
  - net/mlx5: Fill out devlink dev info only for PFs
  - RDMA/mlx5: Fix page_size variable overflow - CVE-2025-22091
  - ACPI: CPPC: Fix _CPC register setting issue


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.25.1.el10_0]
changelog:
  - Bump internal version to 55.25.1
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() - CVE-2025-38000
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc - CVE-2025-37890
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - CVE-2025-38022
  - RDMA/core: Fix use-after-free when rename device name - CVE-2025-22085
  - nvme-tcp: sanitize request list handling - CVE-2025-38264
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done - CVE-2025-38052
  - tcp: adjust rcvq_space after updating scaling ratio
  - ext4: avoid journaling sb update on error if journal is destroying - CVE-2025-22113
  - ext4: define ext4_journal_destroy wrapper - CVE-2025-22113
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() - CVE-2025-21928
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() - CVE-2025-21929
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - net/sched: fix use-after-free in taprio_dev_notifier - CVE-2025-38087
  - net: ch9200: fix uninitialised access during mii_nway_restart - CVE-2025-38086
  - padata: avoid UAF for reorder_work - CVE-2025-21726
  - padata: fix UAF in padata_reorder - CVE-2025-21727
  - padata: add pd get/put refcnt helper
  - padata: fix sysfs store callback check
  - padata: Clean up in padata_do_multithreaded()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove -CVE-2025-22020


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.27.1.el10_0]
changelog:
  - Bump internal version to 55.27.1
  - Fix includes for mm: fix copy_vma() error handling for hugetlb mappings
  - Revert sch_htb: make htb_qlen_notify() idempotent
  - Revert sch_drr: make drr_qlen_notify() idempotent
  - Revert sch_qfq: make qfq_qlen_notify() idempotent
  - Revert codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - Revert sch_htb: make htb_deactivate() idempotent
  - Revert net/sched: Always pass notifications when child class becomes empty
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159
  - Documentation: Fix pci=config_acs= example
  - PCI/ACS: Fix 'pci=config_acs=' parameter
  - Revert "smb: client: fix TCP timers deadlock after rmmod" - CVE-2025-22077
  - Revert smb: client: Fix netns refcount imbalance causing leaks and use-after-free 
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - wifi: ath12k: fix invalid access to memory - CVE-2025-38292
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array - CVE-2024-56721
  - crypto: algif_hash - fix double free in hash_accept - CVE-2025-38079
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-38350
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-38350
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-38350
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race - CVE-2025-38085
  - mm/hugetlb: unshare page tables during VMA split, not before - CVE-2025-38084
  - tools/testing/vma: add missing function stub
  - mm: fix copy_vma() error handling for hugetlb mappings
  - PCI: Use downstream bridges for distributing resources
  - PCI/pwrctrl: Cancel outstanding rescan work when unregistering - CVE-2025-38137
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.28.1.el10_0]
changelog:
  - Conflict with xdp-tools < 1.5.4
  - Bump internal version to 55.28.1
  - tls: always refresh the queue when reading sock - CVE-2025-38471
  - selftests: net: bpf_offload: add 'libbpf_global' to ignored maps
  - selftests: net: fix error message in bpf_offload
  - selftests: net: add more info to error in bpf_offload
  - net: fix udp gso skb_segment after pull from frag_list - CVE-2025-38124
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - s390/pci: Serialize device addition and removal
  - s390/pci: Allow re-add of a reserved but not yet removed device
  - s390/pci: Prevent self deletion in disable_slot()
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device()
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
  - s390/pci: Fix missing check for zpci_create_device() error return
  - s390/pci: Fix potential double remove of hotplug slot
  - s390/topology: Improve topology detection
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() - CVE-2025-38250
  - selftests/bpf: Adjust data size to have ETH_HLEN - CVE-2025-21867
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() - CVE-2025-21867
  - i2c/designware: Fix an initialization issue - CVE-2025-38380


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.29.1.el10_0]
changelog:
  - Bump internal version to 55.29.1
  - ice: fix eswitch code memory leak in reset scenario - CVE-2025-38417
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - net_sched: ets: Fix double list add in class with netem as child qdisc - CVE-2025-37914
  - sch_ets: make est_qlen_notify() idempotent
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw - CVE-2025-38200
  - cxgb4: use port number to set mac addr


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.30.1.el10_0]
changelog:
  - tipc: Fix use-after-free in tipc_conn_close(). - CVE-2025-38464
  - Bump internal version to 55.30.1
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - CVE-2025-37823
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
  - s390/pci: Fix handling of isolated VFs
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
  - s390/pci: Fix SR-IOV for PFs initially in standby
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - CVE-2025-38211
  - udp: Fix memory accounting leak. - CVE-2025-22058
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
  - ext4: only dirty folios when data journaling regular files - CVE-2025-38220
  - vsock: Fix transport_* TOCTOU - CVE-2025-38461
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry - CVE-2025-38472


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.31.1.el10_0]
changelog:
  - Adjust sched/fair: Adhere to place_entity() constraints
  - Bump internal version to 55.31.1
  - sched/fair: Adhere to place_entity() constraints
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero
  - net/sched: ets: use old 'nbands' while purging unused classes - CVE-2025-38350
  - net/sched: Always pass notifications when child class becomes empty - CVE-2025-38350
  - net_sched: ets: fix a race in ets_qdisc_change() - CVE-2025-38107
  - sch_htb: make htb_deactivate() idempotent - CVE-2025-37953
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - CVE-2025-37798
  - sch_qfq: make qfq_qlen_notify() idempotent - CVE-2025-38350
  - sch_drr: make drr_qlen_notify() idempotent - CVE-2025-38350
  - sch_htb: make htb_qlen_notify() idempotent - CVE-2025-37932
  - drm/vkms: Fix use after free and double free on init error - CVE-2025-22097
  - Revert "cxl/acpi: Fix load failures due to single window creation failure"
  - udmabuf: fix a buf size overflow issue during udmabuf creation - CVE-2025-37803
  - drm/framebuffer: Acquire internal references on GEM handles - CVE-2025-38449
  - drm/gem: Acquire references on GEM handles for framebuffers - CVE-2025-38449
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
  - nvme-ioctl: fix leaked requests on mapping error


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.32.1.el10_0]
changelog:
  - Bump internal version to 55.32.1
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() - CVE-2025-38352


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.33.1.el10_0]
changelog:
  - Fix kABI for net_namespace.h
  - Bump internal version to 55.33.1
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface - CVE-2025-38500
  - idpf: convert control queue mutex to a spinlock - CVE-2025-38392
  - eth: bnxt: fix missing ring index trim on error path - CVE-2025-37873
  - tcp: Correct signedness in skb remaining space calculation - CVE-2025-38463
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() - CVE-2025-38550
  - redhat: selftests/bpf: Add cpuv4 variant
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards - CVE-2025-38200
  - use uniform permission checks for all mount propagation changes - CVE-2025-38498
  - do_change_type(): refuse to operate on unmounted/not ours mounts - CVE-2025-38498
  - ublk: make sure ubq->canceling is set when queue is frozen - CVE-2025-22068
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
  - scsi: lpfc: Use memcpy() for BIOS version - CVE-2025-38332
  - net: introduce per netns packet chains


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.34.1.el10_0]
changelog:
  - Bump internal version to 55.34.1
  - sunrpc: fix handling of server side tls alerts - CVE-2025-38566
  - i40e: When removing VF MAC filters, only check PF-set MAC
  - usb: dwc3: gadget: check that event count does not exceed event buffer length - CVE-2025-37810


author: Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.37.1.el10_0]
changelog:
  - fix kABI build errors
  - Adjust new tls selftest for current code
  - Bump internal version to 55.37.1
  - selftests: tls: add tests for zero-length records - CVE-2025-39682
  - tls: fix handling of zero-length records on the rx_list - CVE-2025-39682
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass - CVE-2025-38396
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure - CVE-2025-39698
  - ice: use fixed adapter index for E825C embedded devices
  - ice: use DSN instead of PCI BDF for ice_adapter index
  - tcp: drop secpath at the same time as we currently drop dst
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code
  - cifs: Fix the smbd_response slab to allow usercopy - CVE-2025-38523
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
  - smb: client: make use of common smbdirect_socket_parameters
  - smb: smbdirect: introduce smbdirect_socket_parameters
  - smb: client: make use of common smbdirect_socket
  - smb: smbdirect: add smbdirect_socket.h
  - smb: client: make use of common smbdirect.h
  - smb: smbdirect: add smbdirect.h with public structures
  - smb: client: make use of common smbdirect_pdu.h
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions
  - s390/sclp: Fix SCCB present check - CVE-2025-39694
  - net: stmmac: fix TSO DMA API usage causing oops
  - smb: client: fix use-after-free in cifs_oplock_break - CVE-2025-38527


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.30.1.el10_0]
changelog:
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
  - s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
  - s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
  - udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Xin Long) [RHEL-104102]
  - ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
  - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.31.1.el10_0]
changelog:
  - sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
  - sched/fair: optimize the PLACE_LAG when se->vlag is zero (Phil Auld) [RHEL-91404]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
  - drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
  - Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
  - drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.32.1.el10_0]
changelog:
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.33.1.el10_0]
changelog:
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109530] {CVE-2025-38500}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106061] {CVE-2025-38392}
  - eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104564] {CVE-2025-37873}
  - tcp: Correct signedness in skb remaining space calculation (CKI Backport Bot) [RHEL-107844] {CVE-2025-38463}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111154] {CVE-2025-38550}
  - redhat: selftests/bpf: Add cpuv4 variant (Viktor Malik) [RHEL-109928]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105138] {CVE-2025-38200}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107306] {CVE-2025-38498}
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-99437] {CVE-2025-22068}
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM JIRA: https://issues.redhat.com/browse/RHEL-109821 Y-JIRA: https://issues.redhat.com/browse/RHEL-79173 (Jakub Ramaseuski)
  - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105936] {CVE-2025-38332}
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88923]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.34.1.el10_0]
changelog:
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
  - i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.35.1.el10_0]
changelog:
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
  - cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
  - smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.36.1.el10_0]
changelog:
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
  - ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
  - ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.37.1.el10_0]
changelog:
  - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.38.1.el10_0]
changelog:
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
  - net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
  - net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
  - net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
  - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
  - net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
  - hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.39.1.el10_0]
changelog:
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
  - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.40.1.el10_0]
changelog:
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
  - s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
  - s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
  - s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
  - net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
  - enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
  - enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
  - enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
  - enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
  - enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
  - enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
  - enic: enic rq code reorg (John Meneghini) [RHEL-106602]
  - enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
  - enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
  - enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
  - enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
  - enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
  - enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
  - enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
  - enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
  - enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
  - enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
  - enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
  - enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
  - enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
  - enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
  - scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
  - scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
  - scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
  - scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
  - scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
  - scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
  - scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
  - scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.41.1.el10_0]
changelog:
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
  - erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
  - s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
  - net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
  - NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
  - mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.42.1.el10_0]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
  - KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
  - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
  - cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.43.1.el10_0]
changelog:
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
  - igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
  - igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
  - igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
  - igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
  - igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
  - igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
  - igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
  - coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
  - cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
  - x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
  - x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-92175]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
  - module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
  - module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
  - Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
  - module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
  - execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
  - execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
  - x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
  - x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
  - x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
  - module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
  - x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
  - alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
  - alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
  - maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
  - x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
  - execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
  - x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
  - arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
  - module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
  - asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
  - mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
  - mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-115351]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
  - ice: use string choice helpers (Petr Oros) [RHEL-115351]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
  - lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
  - lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
  - lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
  - lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
  - lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.1.1.el10_0]
changelog:
  - redhat: adjust rhel branch name (Jan Stancek)
  - redhat: set defaults for RHEL 10.0 (Jan Stancek)
  - Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-76109]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-55.2.1.el10_0]
changelog:
  - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-70827]
  - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-70827]
  - powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-70827]
  - powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-70827]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-30789]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-30789] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-30789]
  - redhat: regenerate self-test data for new RHDISTGIT_BRANCH (Patrick Talbert)


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0
changelog:
  - Add cgroup v2 support to all libcgroup tools -
    cgclassify, cgclear, cgconfigparser, cgcreate, cgdelete, cgexec, cgget,
    cgrulesengd, cgset, cgsnapshot, lscgroup, lssubsys. See github issue #12.
  - Fix an issue with parallel builds
  - Add extensive functional tests
  - Remove .libs from Makefile.am files
  - Major refactor of cgget to make it more closely align with the other tools
  - Fix many string truncation and possible buffer overflow warnings


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.1
changelog:
  - Allow reading/writing from cgroup.* files in cgroup v2
  - Add support for cgroup v2's cgroup.threads file
  - Fix issue where libcgroup/pam wasn't working properly when
  - cgrulesengd is disabled
  - Fix a bug where the cgroup version wasn't initialized in a
  - named cgroup v1 hierarchy
  - Various automake bug fixes
  - Build PAM module as unversioned DSO
  - Fix build issues with musl libc
  - Fix potential TOCTOU race in cgroup_get_procs()


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.2-1.0.1
changelog:
  - Fix extra spaces in configure.ac's --enable-bindings
  - Fix potential segfault if there are more than 100 cgroup mount points


author: Tom Hromatka <tom.hromatka@oracle.com> - 3.0.0-1.0.1
changelog:
  - Introduce cgxget and cgxset - tools to abstract cgroup v1 and v2 systems
  - Introduce new C APIs that abstract the cgroup v1 and v2 interfaces for the user
    Remove the cgclear tool
  - Introduce modern Cython-based Python bindings, replacing the old bindings
  - Add spdx license tags across the files
  - Introduce a process for handling security-related vulnerabilities
  - Fix many warnings and errors reported by coverity
  - Add full cgroup v2 support to continuous integration
  - Add code quality analysis to continuous integration
  - Add Linux kernel syntax style and add checking to continuous integration


author: Tom Hromatka <tom.hromatka@oracle.com> - 3.1.0-1.0.1
changelog:
  - Add systemd C APIs
  - Add systemd support to all command line tools, including cgcreate,
    cgconfigparser, cgexec, and cgclassify. Note the usage of the -b flag in many
    tools to ignore the default systemd hierarchy and operate from the root of
    the cgroup hierarchy
  - Add python systemd APIs
  - Improved handling of legacy (cgroup v1), hybrid (v1/v2), and unified (v2)
    cgroup hierarchies
  - Add several new C APIs, including:
    cg_setup_mode_t() - A function that returns the current cgroup setup mode
    (legacy, hybrid, or unified)
    Various functions for better traversal through a struct cgroup
    cgroup_create_scope() and cgroup_create_scope2() for creating systemd scopes
    cgconfigparser now supports a systemd section
  - Libcgroup python bindings have matured greatly but are still considered
    experimental and subject to change. Community feedback here would be greatly
    appreciated
    Add rudimentary logging support
    Add systemd support
    Add setup mode (legacy, hybrid, unified) support
    Add several APIs for operating on struct cgroup in a Pythonic manner
    Add methods for moving processes within cgroups
    Rename blacklist to denylist
    Rename whitelist to allowlist
    Add many functional tests
  - Remove ExecStop from extras-3.1.0/cgconfig.service unit
  - Add dependency of selinux-policy package for libcgroup-tools


author: Tom Hromatka <tom.hromatka@oracle.com> - 3.2.0-1.0.1
changelog:
  - Update to upstream version v3.2.0 of libcgroup
  - Add Provides tag for packages/applications that depend upon libcgroup
  - Obsolete all packages from libcgroup v3.1.0 and previous


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: EL Errata <el-errata_ww@oracle.com> - 1.54.0-5.0.1
changelog:
  - Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448]
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.1
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131422)
  - CVE-2025-65018: heap buffer overflow (RHEL-131435)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133212)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.2
changelog:
  - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148323)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148818)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146645)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.4
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161324)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-6.2
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148254)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-6.1
changelog:
  - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148565)
  - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148588)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Darren Archibald <darren.archibald@oracle.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
  - qemu_snapshot: allow reverting to external disk only snapshot
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk


author: David Sloboda <david.x.sloboda@oracle.com> - 10.10.0-8.1
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Akshata Konala <akshata.konala@oracle.com> - 10.10.0-8.3
changelog:
  - qemuPrepareNVRAMFile: Fix NVRAM image conversion check (RHEL-97761)
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-95956)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-95956)
  - qemu_capabilities: query deprecated features for host-model (RHEL-95956)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-95956)
  - qemu_capabilities: filter deprecated features if requested (RHEL-95956)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-95956)
  - conf: add deprecated_features attribute (RHEL-95956)


author: Darren Archibald <darren.archibald@oracle.com> - 10.10.0-8.4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106278)
  - qemu: sanitize blank lines in config file (RHEL-106278)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106278)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.1.el10_1
changelog:
  - tools: Secure guest check for Intel in virt-host-validate (RHEL-111863)
  - qemu: Check if INTEL Trust Domain Extention support is enabled (RHEL-111863)
  - qemucapabilitiesdata: Document '+inteltdx' variant (RHEL-111863)
  - qemucapabilitiestest: Add data for the qemu-10.1.0 dev cycle on x86_64 for the '+inteltdx' variant (RHEL-111863)
  - qemu: Add QEMU_CAPS_TDX_GUEST capability (RHEL-111863)
  - conf: Expose TDX feature in domain capabilities (RHEL-111863)
  - conf: Add tdx as launch security type (RHEL-111863)
  - conf: Validate TDX launchSecurity element mrConfigId/mrOwner/mrOwnerConfig (RHEL-111863)
  - qemu: Add command line and validation for TDX type (RHEL-111863)
  - conf: Expose TDX type in domain launch security capability (RHEL-111863)
  - qemu: Force special parameters enabled for TDX guest (RHEL-111863)
  - qemu: log the crash information for TDX (RHEL-111863)
  - qemu_firmware: Pick the right firmware for TDX guests (RHEL-111863)
  - conf: Add Intel TDX Quote Generation Service(QGS) support (RHEL-111863)
  - qemu: Add command line for TDX Quote Generation Service(QGS) (RHEL-111863)
  - qemu: Add FakeReboot support for TDX guest (RHEL-111863)
  - qemu: Support reboot command in guest (RHEL-111863)
  - qemu: Avoid duplicate FakeReboot for secure guest (RHEL-111863)
  - qemu: Send event VIR_DOMAIN_EVENT_[STOPPED|STARTED] during recreation (RHEL-111863)
  - qemu: Support domain reset command for TDX guest (RHEL-111863)
  - qemuxmlconftest: Add latest version of 'launch-security-tdx*' test data (RHEL-111863)
  - docs: domain: Add documentation for Intel TDX guest (RHEL-111863)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.2.el10_1
changelog:
  - cpu_conf: Make virCPUDefFilterFeatures return void (RHEL-126094)
  - qemu_domain: Simplify qemuDomainFixupCPUs (RHEL-126094)
  - qemu_domain: Fix qemuDomainFixupCPUs (RHEL-126094)
  - qemu_process: Always fix CPUs on reconnect (RHEL-126094)
  - qemu_monitor: Filter CPU features reported by QEMU (RHEL-126094)
  - qemu: Ignore "ht" CPU feature (RHEL-126094)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.5.el10_1
changelog:
  - esx: Allow disk images in subdirectories (RHEL-140865)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140465)
  - esx: URI encode inventory objects twice (RHEL-140465)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.7.el10_1
changelog:
  - esx: Debug URL just before opening with curl (RHEL-142863)
  - esx: Abstract all URL-creation code into one function (RHEL-142863)
  - esx: Switch to creating URLs using virURIFormat (RHEL-142863)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: EL Errata <el-errata_ww@oracle.com> - 40.5.11-1.0.1
changelog:
  - Switch to UEKR8 kernel
  - Support kernel-ueknext for OL10 Developer Preview
  - Fix error message [Orabug: 35394486]
  - Do not install nmap-ncat into runtime.
  - Fix oracle-logos exception during ISO build
  - Tweak oracle-logos.patch to prevent exception during ISO build
  - Include btrfs-progs and libblockdev-btrfs in the install tree when using UEK kernel   [Orabug: 30792917]
  - Add bug28945615-to-reset-permission-under-efi-boot.patch [Orabug: 28945615]
  - Add to_check_if_uek_kernel.patch to make sure pick up uek kernel when to boot uek boot iso [Orabug: 23180571]
  - Do not create early microcode initrd.img by default [Orabug: 18920725]
  - Adjust menu so text is not hidden [Orabug: 19029563]
  - Add logic to enable UEK kernel in boot ISO (kevin.x.lyons@oracle.com)
  - Updated lorax package to adjust ISO splash screen text so it is
    aligned better (kevin.x.lyons@oracle.com)
  - Added oracle-logos.patch
  - lorax.spec: Update for RHEL 9 Alpha changes (bcl@redhat.com)
  - lorax: Strip ' from product cmdline argument (bcl@redhat.com)
  - Change rootfs default size to 3GiB (sgallagh@redhat.com)
  - Don't remove libldap_r libraries during runtime-cleanup.tmpl (spichugi@redhat.com)
  - Do not use '--loglevel' option when running Anaconda (vtrefny@redhat.com)
  - Makefile: quiet rsync use in testing (bcl@redhat.com)
  - Switch to using GitHub Actions instead of Travis CI (bcl@redhat.com)
  - Update the default release version to 34 (bcl@redhat.com)
  - Remove mdmonitor service from boot.iso (bcl@redhat.com)
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl@redhat.com)
  - sshd_config: Apply suggested changes (bcl@redhat.com)
  - lorax.spec: Add BuildRequires on systemd-rpm-macros for tmpfilesdir macro (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: EL Errata <el-errata_ww@oracle.com> - 10.0-56.0.1
changelog:
  - Resolve Wayland issue with UEKR8 [Orabug: 37569575]
  - Switch to UEKR8 kernel
  - Remove gcom-firmware for aarch64
  - Support kernel-ueknext for OL10 Developer Preview
  - Do not install nmap-ncat or libreport-rhel-anaconda-bugzilla into runtime.
  - Remove RHCK initrd from runtime image when creating the UEK
    boot ISO. (mark.will@oracle.com) [Orabug: 34085357]
  - Dropped redhat-release-eula.
  - Updated description and Summary.
  - Set permissions under ${EFIBOOTDIR} to 555 [Orabug: 28945615]
  - Allow to create UEK boot iso


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 24.2.8-3
changelog:
  - util/disk_cache: Do not try to delete old cache if cache is disabled
  - docs: Update MESA_SHADER_CACHE_DIR env variable behavior
    [RHEL-108122]


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-2.1
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-4
changelog:
  - Resolves: RHEL-134483 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-2
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127092)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092)
    Resolves: CVE-2025-12801


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-2
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-3
changelog:
  - Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
    file modification via buffer overflow in ngx_http_dav_module


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-4
changelog:
  - Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
    to memory corruption via crafted MP4 file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-5
changelog:
  - Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-6
changelog:
  - Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
    Code Execution via specially crafted MP4 files


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-85673
  - Support nm connection with empty connection.interface-name. RHEL-84756


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110779
  - Support IPv4 forwarding. RHEL-110788
  - Support IPSec `leftsendcert` option. RHEL-110635


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121112
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121993


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110636
  - Support IPv4 forwarding. RHEL-110789
  - Support IPSec `leftsendcert` option. RHEL-110636


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Use global DNS even for static IP with static DNS. (RHEL-126738)
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-130914)


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85838


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: EL Errata <el-errata_ww@oracle.com> - 12.5.0-1.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1.el10_0.1
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117381]
  - Resolves: RHEL-117381
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.0.z])


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.1
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781]
  - ovt-Address-CVE-2025-41244.patch [RHEL-117382]
  - Resolves: RHEL-99781
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10])
  - Resolves: RHEL-117382
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.el10_1.1
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117383]
  - Resolves: RHEL-117383
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.el10_1.2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-114958]
  - Resolves: RHEL-114958
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10.1.z])


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Edgar Aguilar <edgar.aguilar@oracle.com> - 1.4.1-1.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-12
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128397
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128387


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-13
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155811


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-14
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164738
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166237
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166221
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166189
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166205


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-7
changelog:
  - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
    CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
    CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
    Resolves: RHEL-142062
    Resolves: RHEL-141985
    Resolves: RHEL-142053
    Resolves: RHEL-142049
    Resolves: RHEL-142045
    Resolves: RHEL-142041
    Resolves: RHEL-142037
    Resolves: RHEL-142033
    Resolves: RHEL-142029
    Resolves: RHEL-142008
    Resolves: RHEL-142025
    Resolves: RHEL-142021


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 132-1.0.1
changelog:
  - Simplify repository names [JIRA: OLDIS-35893]
  - Ensure build on latest golang: CVE-2024-34156
  - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
  - Support using OCI variables inside built images [JIRA: OLDIS-35302]
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]
  - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 134.1-2.0.1
changelog:
  - Add OL10 support
  - Update repository URLs for baseos, appstream and UERK
  - Fix the label for UEKR repository
  - Simplify repository names [JIRA: OLDIS-35893]
  - Ensure build on latest golang: CVE-2024-34156
  - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
  - Support using OCI variables inside built images [JIRA: OLDIS-35302]
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]
  - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]


author: Gianluca Zuccarelli <gzuccare@redhat.com> - 134.1-3
changelog:
  - Fix json tailoring blueprint conversion
    Resolves: RHEL-115392
  - Fix unclosed logrus logging pipes
    Resolves: RHEL-121533
  - Update go-jose dependency
    Resolves: RHEL-82957 (CVE-2025-27144)


author: EL Errata <el-errata_ww@oracle.com> - 134.1-3.0.1
changelog:
  - Add OL10 support
  - Update repository URLs for baseos, appstream and UERK
  - Fix the label for UEKR repository
  - Simplify repository names [JIRA: OLDIS-35893]
  - Ensure build on latest golang: CVE-2024-34156
  - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
  - Support using OCI variables inside built images [JIRA: OLDIS-35302]
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]
  - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]
  - Rebuild for CVE-2025-22871


author: EL Errata <el-errata_ww@oracle.com> - 149-4.0.1
changelog:
  - Add missing dependency over dracut-config-rescue for image-installer [Orabug: 38587453]
  - Add OL10 support
  - Update repository URLs for baseos, appstream and UERK
  - Fix the label for UEKR repository
  - Simplify repository names [JIRA: OLDIS-35893]
  - Ensure build on latest golang: CVE-2024-34156
  - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
  - Support using OCI variables inside built images [JIRA: OLDIS-35302]
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]
  - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]


author: imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 149-5
changelog:
  - Rebuilt to fix: 
    - CVE-2025-61726
    - CVE-2025-61728
    - CVE-2025-61729
    - CVE-2025-68121
    - RHEL-146726
    - RHEL-146931
    - RHEL-147353
    - RHEL-149232


author: Craig Guiller <craig.guiller@oracle.com> - 20250124-2.0.1
changelog:
  - Add OL9.6 data [Orabug: 37816177]
  - Make sure all OL XML files are included [Orabug: 37816177]
  - Add OL10.0 data
  - Add 9.5 data


author: Craig Guiller <craig.guiller@oracle.com> - 20250606-1.0.1
changelog:
  - Fix path to initrd and vmlinux on x86_64 for OL10 [Orabbug: 38239100]
  - Add OL10.1 data
  - Add OL9.7 data
  - Add OL9.6 data [Orabug: 37816177]
  - Make sure all OL XML files are included [Orabug: 37816177]
  - Add OL10.0 data
  - Add 9.5 data


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.2-1
changelog:
  - Rebase to ostree 2025.2 Backport
    https://github.com/ostreedev/ostree/pull/3473 Backport
    https://github.com/ostreedev/ostree/pull/3472


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Alan Steinberg <alan.steinberg@oracle.com> - 3.0.0-5.0.1
changelog:
  - Replace bug url [Orabug: 34202300]
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Mark Will <mark.will@oracle.com> - 0^20250217.ga1e48a0-5
changelog:
  - Resolves: RHEL-83979 RHEL-84157 RHEL-86761
  - Resolves: RHEL-84249 RHEL-83979 RHEL-84157 RHEL-84248
  - Resolves: RHEL-80297


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Mohith Kumar Thummaluru <mohith.k.kumar.thummaluru@oracle.com> - 6.3.7-1.0.2
changelog:
  - Add support for rocestat pmda [Orabug: 38109270]
  - Add support for rocestat client [Orabug: 38109292]


author: Sourav Sharma <sourav.ss.sharma@oracle.com> 6.3.7-1.0.4
changelog:
  - Backports various pcp bugs and enhancements  [Orabug: 35778072]
  - [Orabug: 36932629] [Orabug: 37655753] [Orabug: 38435551]
  - [Orabug: 38380185] [Orabug: 38526634]


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: EL Errata <el-errata_ww@oracle.com> - 6.3.7-5.0.1
changelog:
  - Fixes build issues due to patch 1002 applying error [Orabug: 38288886]
  - Add support for rocestat pmda [Orabug: 38109270]
  - Add support for rocestat client [Orabug: 38109292]


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Alex Burmashev <alexander.burmashev@oracle.com> - 4:5.40.2-512.1
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: EL Errata <el-errata_ww@oracle.com> - 116-6.0.1
changelog:
  - Update Oracle Linux test certificates [Orabug: 35823872]
  - Update Oracle Linux test certificates [Orabug: 31928433]


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: EL Errata <el-errata_ww@oracle.com> - 5.4.0-1.0.1
changelog:
  - Add devices on container startup, not on creation
  - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
  - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 5.4.0-1.0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49) [Orabug: 37995432]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 6:5.4.0-10
changelog:
  - rebuild to resolve CVE-2025-22871
  - Pick latest f rom https://github.com/containers/podman/tree/v5.4-rhel
    https://github.com/containers/podman/commit/0ee1d49


author: Craig Guiller <craig.guiller@oracle.com> - 6:5.4.0-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9811294)
  - fixes "CVE-2025-6032 podman: podman missing TLS verification [rhel-9.6.z]"
  - Resolves: RHEL-96708


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/b0d88c7)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.6.z]"
  - Resolves: RHEL-113152


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/7078b79)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-10.1]"
  - Resolves: RHEL-113140


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/c5a3735)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald - [RHEL 10.1] 0day"
  - Resolves: RHEL-110318


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/61231e1)
  - fixes "Timeouts while pushing Sigstore logs to Rekor - [RHEL 10.1] 0day"
  - Resolves: RHEL-111077


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/2791007)
  - fixes "[Minor Incident] CVE-2025-52881 podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-10.1.z]"
  - Resolves: RHEL-126635


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/3bf5313)
  - fixes "run 1.2.x upgrade throws error while using nocopy volume mount filesystem option - [RHEL 10.1]"
  - Resolves: RHEL-132532


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/a58af02)
  - fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Podman [rhel-10.1.z]"
  - Resolves: RHEL-132825


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/0a20b84)
  - fixes "CVE-2025-47913 podman: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-10.1.z]"
  - Resolves: RHEL-134778


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/b194cd9)
  - fixes "podman build system test easily failed with TIMEOUT"
  - Resolves: RHEL-138650


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149364 RHEL-149398 RHEL-149332


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: EL Errata <el-errata_ww@oracle.com> - 3.52.8-1.0.1
changelog:
  - Support btrfs with --autopart on uek
    [Orabug: 37413006]
  - Revert back to Fedora 38 Autopart handler to support BTRFS
    [Orabug: 37413006]
  - Retain the btrfs command in RHEL10_BTRFS class
    [Orabug: 37119393]
  - Support btrfs partition command in RHEL9_Partition class
    [Orabug: 33796791]
  - Sync OL 8 command handlers with upstream [Orabug: 31683439]
  - Don't exit installer if btrfs is specified for autopart [Orabug: 31192722]
  - Don't exit installer with message that btrfs is unsupported [Orabug: 31192722]
  - Fix crash when using btrfs [Orabug: 30792917]
  - Remove the RHSM command [Orabug: 30902364]
  - drop syspurpose command [Orabug: 29443881]
  - Include the OL8 Handler class in the commandMap [Orabug: 29373077]
  - Make sure version is output properly for OL [Orabug: 20440019]
  - Alter tools to recognize OL version strings [Orabug: 20440019]
  - Enable Oracle Linux handlers


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.0.0-19
changelog:
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-122777
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-122776


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.2.0-1
changelog:
  - python-podman-5.2.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.2.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.3.0-1
changelog:
  - python-podman-5.3.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.3.0
  - Resolves: RHEL-69004


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 2.1.76-12.0.1
changelog:
  - Add patch 101-allow-mixed-case-in-oracle-iqns to fix [Orabug: 27613482]
  - Add patch 100-allow-underscore-in-oracle-iqns to fix [Orabug: 27582660]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-3.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143054 RHEL-143105 RHEL-144852


author: Akshata Konala <akshata.konala@oracle.com> - 3.12.9-2.2
changelog:
  - Enable PAC and BTI protections for aarch64
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-13
changelog:
  - Added TDX support
  - Resolves: RHEL-20797
    ([Intel 10.0 FEAT] TDX: host: Virt-QEMU: Add safe device pass-through for TD)
  - Resolves: RHEL-49727
    ([Intel 10.0 FEAT] [SPR][EMR] Virt-QEMU: TDX: Allow to configure apic bus clock)
  - Resolves: RHEL-50307
    ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14
changelog:
  - kvm-hw-uefi-clear-uefi-vars-buffer-in-uefi_vars_write-ca.patch [RHEL-108614]
  - kvm-hw-uefi-return-success-for-notifications.patch [RHEL-108614]
  - kvm-hw-uefi-check-access-for-first-variable.patch [RHEL-108614]
  - Resolves: RHEL-108614
    (CVE-2025-8860 qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.1
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-120074]
  - Resolves: RHEL-120074
    ([rhel10] Backport "arm/kvm: report registers we failed to set" [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.2
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120118]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120118]
  - Resolves: RHEL-120118
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.1.z])


author: Jon Maloy <jmaloy@redhat.com> - 10.0.0-14.el10_1.3
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-129549]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-129549]
  - Resolves: RHEL-129549
    ([RHEL 10]snp guest fail to boot with hugepage [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.4
changelog:
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133521]
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-133527]
  - Resolves: RHEL-133521
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device [rhel-10.1.z])
  - Resolves: RHEL-133527
    (Assertion failure on drain with iothread and I/O load [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-14.el10_1.5
changelog:
  - kvm-Revert-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-be.patch [RHEL-135453]
  - Resolves: RHEL-135453
    (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: pdcm [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-vfio-container-Fix-container-object-destruction.patch [RHEL-67936]
  - kvm-virtio-net-disable-USO-for-RHEL9.patch [RHEL-40950]
  - kvm-qemu-guest-agent-add-new-api-to-allow-rpc.patch [RHEL-60223]
  - Resolves: RHEL-67936
    (QEMU should fail gracefully with passthrough devices in SEV-SNP guests)
  - Resolves: RHEL-40950
    ([Stable_Guest_ABI][USO]From 10-beta to RHEL.9.5.0  the guest with 9.4 machine type only, the guest crashed  with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7 )
  - Resolves: RHEL-60223
    ([qemu-guest-agent] Add new api 'guest-network-get-route' to allow-rpc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-58316]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68444]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68444]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68444]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68444]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68444]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68444]
  - Resolves: RHEL-58316
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel10.0)
  - Resolves: RHEL-68444
    (The new "boot order" feature is sometimes not working as expected [RHEL 10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-69047]
  - Resolves: RHEL-69047
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-32665]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-32665]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-32665]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-32665]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71939]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67108]
  - Resolves: RHEL-32665
    ([IBM 10.0 FEAT] KVM: CPU model for new IBM Z HW - qemu-kvm part)
  - Resolves: RHEL-71939
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-67108
    ([aarch64] [rhel-10.0] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-43412]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-43412]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-43412]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-43412]
  - kvm-pc-q35-Bump-max_cpus-to-4096-vcpus.patch [RHEL-57668]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73005]
  - kvm-virtio-net-disable-USO-for-all-RHEL9.patch [RHEL-69500]
  - Resolves: RHEL-43412
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-10.0-beta])
  - Resolves: RHEL-57668
    ([RFE] [HPEMC] [RHEL-10.0] qemu-kvm: support up to 4096 VCPUs)
  - Resolves: RHEL-73005
    (qemu-kvm: vhost: reports error while updating IOTLB entries)
  - Resolves: RHEL-69500
    ([Stable_Guest_ABI][USO][9.6.0-machine-type]From 10.0 to RHEL.9.6.0 the guest with 9.6 machine type only, the guest crashed with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-11
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-73002]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73835]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-74361]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-74461]
  - Resolves: RHEL-73002
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9 [rhel-10])
  - Resolves: RHEL-73835
    (VM crashes when requesting domstats [rhel-10])
  - Resolves: RHEL-74361
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))
  - Resolves: RHEL-74461
    (fsfreeze hooks doesn't log error on system logs when running hook fails [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-12
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65618]
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72717]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72717]
  - kvm-arm-disable-pauth-for-virt-rhel9-in-RHEL10.patch [RHEL-71761]
  - Resolves: RHEL-65618
    ([RHEL10] Failed to hot add PCIe device behind xio3130 downstream)
  - Resolves: RHEL-72717
    (Boot fall back to cdrom from network not always working)
  - Resolves: RHEL-71761
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-13
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-76908]
  - Resolves: RHEL-76908
    (Ensure qemu as NBD server does not flood logs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-14
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73894]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78370]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78370]
  - Resolves: RHEL-73894
    (No RARP packets on the destination after migration [rhel-10])
  - Resolves: RHEL-78370
    (Add vhost-user internal migration for passt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15
changelog:
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54670]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54670]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54670]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54670]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54670]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54670]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54670]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54670]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54670]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54670]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54670]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54670]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54670]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54670]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54670]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54670]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54670]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54670]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54670]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54670]
  - Resolves: RHEL-54670
    (Provide QMP command for block device reactivation after migration [rhel-10.0])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.1
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-80622]
  - Resolves: RHEL-80622
    (Allow libvirt to restart passt/vhost-user when the process is killed


author: Alan Steinberg <alan.steinberg> - 9.1.0-15.2
changelog:
  - kvm-hw-i386-Fix-machine-type-compatibility.patch [RHEL-92430]
  - Resolves: RHEL-92430
    (Fix x86 M-type compats [rhel-10.0.z])


author: Kevin Lyons <kevin.x.lyons> - 9.1.0-15.3
changelog:
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-100765]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-99889]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-99889]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-99889]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-99889]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-99889]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-99889]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-99889]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-99889]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-99889]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-99889]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-99889]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-99889]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-99889]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-99889]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-99889]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-99889]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-99889]
  - Resolves: RHEL-100765
    (Video stuck after switchover phase when play one video during migration [rhel-10.0.z])
  - Resolves: RHEL-99889
    (-ftrivial-auto-var-init=zero reduced performance [rhel-10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15.el10_0.1
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-80522]
  - Resolves: RHEL-80522
    (Allow libvirt to restart passt/vhost-user when the process is killed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15.el10_0.4
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-108727]
  - Resolves: RHEL-108727
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.0.z])


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: RHEL Packaging Agent <jotnar@redhat.com> - 6.9.1-2.2
changelog:
  - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion
    guard to prevent stack overflow
    Resolves: RHEL-119719


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Rich Megginson <rmeggins@redhat.com> - 1.106.1-0.1
changelog:
  - Resolves: RHEL-103887 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
  - Resolves: RHEL-103573 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
  - ha_cluster - ansible 2.19 support
  - bootloader - fix wording in README


author: Rich Megginson <rmeggins@redhat.com> - 1.107.0-0.1
changelog:
  - Resolves: RHEL-105093 : podman - specifying multiple users causes resources to be associated with wrong user
  - Resolves: RHEL-95757 : storage - Improve error reporting when invalid or unsupported RAID configuration is given
  - Resolves: RHEL-95729 : storage - [RHEL10] Incorrect key file in crypttab entry for volume encrypted_vol
  - refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
  - fix tests in postfix, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.1-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - Resolves: RHEL-95719 : storage - Tests verification fails on encrypted LVM on top of MD RAID
  - Resolves: RHEL-106261 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d
  - fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
  - fix postfix role tests related to rebooting
  - fix ha_cluster role tests related to missing fence agent
  - add firewall test debugging for interface tests


author: Rich Megginson <rmeggins@redhat.com> - 1.108.3-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - add bootloader test for this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Akshata Konala <akshata.konala@oracle.com> - 1.108.6-0.1.0.1
changelog:
  - Replace bug reporting url [Orabug: 34202300]
  - Replace upstream references from description tag [OLDIS-1810]
  - Replace upstream URLs from galaxy_transform.py command in spec file
  - Remove comments which confuse ruamel
  - Replace upstream reference of Ansible Collection in spec file [Orabug: 32904501]


author: Rich Megginson <rmeggins@redhat.com> - 1.92.1-0.1
changelog:
  - Resolves: RHEL-45303 : ha_cluster - rhel_system_roles.ha_cluster - adapt the role for pcs-0.12
  - Resolves: RHEL-70571 : systemd - fix: Always become user we are managing [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.93.0-0.1
changelog:
  - Resolves: RHEL-70700 : storage - Could not find luks2 key size in verify-pool-member-encryption.yml
  - also resolves some test failures in cockpit


author: Rich Megginson <rmeggins@redhat.com> - 1.94.1-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking [rhel-10]
  - this adds cron support for aide
  - Resolves: RHEL-73442 : network - fix: Prioritize find link info by permanent MAC address, with fallback to current address [rhel-10]
  - Resolves: RHEL-73443 : podman - fix: get user information for secrets [rhel-10]
  - Resolves: RHEL-73441 : sshd - fix: use quote with command, shell and validate with variable [rhel-10]
  - Resolves: RHEL-73440 : sshd - fix: rename var sshd -> sshd_config and deprecate the former [rhel-10]
  - Resolves: RHEL-73439 : sshd - fix: Reload the service when needed [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.94.1-0.2
changelog:
  - Resolves: RHEL-67411 New role aide to manage system integrity checking
  - not really related to aide - new community.general collection rhsm_repository.py
  - module now has line lengths > 164 which causes ansible-lint errors due to vendoring
  - fixed - skip pep8 checking


author: Rich Megginson <rmeggins@redhat.com> - 1.94.2-0.1
changelog:
  - Resolves: RHEL-76504 : storage - Ansible storage role 'grow_to_fill' option on LVM pools always failing with LVM resize failure due to miscalculation of free extents. [rhel-10]
  - also includes updates for el10 for ha_cluster and rhc
  - new community.general 10.3.0


author: Rich Megginson <rmeggins@redhat.com> - 1.95.3-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes aide ostree support
  - fixes storage role ostree support
  - fixes cockpit tests_packages_full
  - fixes kdump tests_ssh_wrapper
  - fix crash in selinux.py module on el7


author: Rich Megginson <rmeggins@redhat.com> - 1.95.4-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes an issue with parameter name
  - fixes an issue with changed reporting true when nothing has changed


author: Rich Megginson <rmeggins@redhat.com> - 1.95.5-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes issue with certificate tests_basic_ipa.yml


author: Rich Megginson <rmeggins@redhat.com> - 1.95.7-0.1
changelog:
  - Resolves: RHEL-82525 : rhc - rhc: does not enable content in EL10 systems [rhel-10]
  - plus an upgrade to rhc role to fix a testing issue
  - Resolves: RHEL-82526 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on RHEL-10 [rhel-10]


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: EL Errata <el-errata_ww@oracle.com> - 9.6-9.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replace bugzilla.oracle.com references [Orabug: 34202300]
  - Added oracle-bugzilla.patch to replace bugzilla url


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171244


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Mark Will <mark.will@oracle.com> - 0:4.21.3-104
changelog:
  - resolves: RHEL-75587 - Fix deadlock between two smbd processes
  - resolves: RHEL-85348 - Fix winbindd memory leak


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 0:4.21.3-113
changelog:
  - Rebuild for zstream
  - Fix 'net ads join' in setups with multiple DCs
  - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.21.3-106)
  - Fix winbind fork bomb in 'IPA with AD trust'
    environment
  - Fix samba-gpupdate to process empty GPO Link
  - Fix 'net ads kerberos kinit'
  - smb.conf: Remove the '@' for NIX groups, we
    removed NIS support


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Edgar Aguilar <edgar.aguilar@oracle.com> - 0.1.77-2.0.1
changelog:
  - Update OL9 STIG to align with DISA STIG V1R1 [Orabug: 38201131]
  - Update OL10 profiles [Orabug: 37806688]


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.78-1
changelog:
  - rebase scap-security-guide to the latest version 0.1.78 (RHEL-111008)
  - rules allow white spaces around equal sign in Systemd configuration (RHEL-93659)
  - add support for dropin files to Systemd coredump rules (RHEL-99973)


author: Armando Acosta <armando.acosta@oracle.com> - 0.1.78-1.0.1
changelog:
  - Update OL9 STIG to V1R2 [Orabug: 38523686]
  - Fix accounts password pwquality and faillock behavior [Orabug: 38523686]


author: Artem Denisov <adenisov@redhat.com> - 0.1.79-1
changelog:
  - rebase scap-security-guide to the latest version 0.1.79 (RHEL-130242)
  - add a test scenario to cover case where user has nologin defined in usr (RHEL-118647)


author: Armando Acosta <armando.acosta@oracle.com> - 0.1.79-2.0.1
changelog:
  - Update OL9 STIG to V1R3 [Orabug: 38790495]
  - Add new rule to ensure EPEL is not configured [Orabug: 38790495]
  - Update OL8 and OL9 STIG references [Orabug: 38790495]


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.80-1
changelog:
  - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
  - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
  - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
  - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
  - Corrected version in the description of CIS profiles (RHEL-143955)
  - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)


author: EL Errata <el-errata_ww@oracle.com> - 0.1.80-1.0.1
changelog:
  - Update OL9 STIG to V1R4 [Orabug: 38993199]
  - Removed configure_ssh_crypto_policy from OL9 profiles [Orabug : 39208555]


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.20-1
changelog:
  - Allow virtqemud domain transition on numad execution
  Resolves: RHEL-65789
  - Support virt live migration using ssh
  Resolves: RHEL-53972
  - Allow ssh_t read systemd config files
  Resolves: RHEL-53972
  - Allow virtqemud permissions needed for live migration
  Resolves: RHEL-43217
  - Allow virtqemud the getpgid process permission
  Resolves: RHEL-46357
  - Allow virtqemud manage nfs dirs when virt_use_nfs boolean is on
  Resolves: RHEL-71068
  - Allow virtqemud relabelfrom virt_log_t files
  Resolves: RHEL-48236
  - Allow virtqemud relabel tun_socket
  Resolves: RHEL-71394
  - Allow gnome-remote-desktop dbus chat with policykit
  Resolves: RHEL-35877
  - Update ktlsh policy
  Resolves: RHEL-42672
  - Confine the ktls service
  Resolves: RHEL-42672
  - Allow request-key to read /etc/passwd
  Resolves: RHEL-71490
  - Allow request-key to manage all domains' keys
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
changelog:
  - Allow init create vsock socket for sshd
  Resolves: RHEL-72549
  - Support ssh connections via systemd-ssh-generator
  Resolves: RHEL-72549
  - Allow ssh generator work with systemd unit files
  Resolves: RHEL-72549
  - Confine systemd system-ssh-generator
  Resolves: RHEL-72549
  - Allow login_userdomain getattr nsfs files
  Resolves: RHEL-72549
  - Allow virtqemud send a generic signal to the ssh client domain
  Resolves: RHEL-53972
  - Add the auth_dontaudit_read_passwd_file() interface
  Resolves: RHEL-71490
  - Dontaudit request-key read /etc/passwd
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
changelog:
  - Allow staff user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-69118
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-69118
  - Allow svirt_t read sysfs files
  Resolves: RHEL-71270
  - Label /dev/pmem[0-9]+ with fixed_disk_device_t
  Resolves: RHEL-71656
  - Add support for the KVM guest memfd anon inodes
  Resolves: RHEL-69128
  - Allow sysadm user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-71665
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-71665


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.23-1
changelog:
  - Remove the lockdown class from the policy
  Resolves: RHEL-36741
  - Remove socket from unconfined_domain_type allow rule
  Resolves: RHEL-36741
  - Include key_socket in socket_class_set
  Resolves: RHEL-36741


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.24-1
changelog:
  - Allow systemd-generator connect to syslog over a unix datagram socket
  Resolves: RHEL-75879
  - Allow ssh_t to change role to system_r
  Resolves: RHEL-53972
  - Allow virtnodedev create /etc/mdevctl.d/scripts.d with bin_t type
  Resolves: RHEL-39893
  - Allow virtqemud manage fixed disk device nodes
  Resolves: RHEL-71656
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72861
  - Allow systemd-machined read the vsock device
  Resolves: RHEL-74280
  - Allow pcmsensor write nmi_watchdog state information
  Resolves: RHEL-52838
  - Label /proc/sys/kernel/nmi_watchdog with sysctl_nmi_watchdog_t
  Resolves: RHEL-52838


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
changelog:
  - Update ktlshd policy to read /proc/keys and domain keyrings
  Resolves: RHEL-42672
  - Allow pcmsensor read nmi_watchdog state information
  Resolves: RHEL-52838
  - Support peer-to-peer migration of vms using ssh
  Resolves: RHEL-77351
  - Allow virt_domain read hardware state information unconditionally
  Resolves: RHEL-71270
  - Allow timemaster write to sysfs files
  Resolves: RHEL-44637
  - Allow virtqemud map svirt_image_t plain files
  Resolves: RHEL-40080
  - Allow virtqemud unmount a filesystem with extended attributes
  Resolves: RHEL-40080
  - Allow virtqemud work with nvdimm devices
  Resolves: RHEL-71656
  - Update virtqemud policy regarding the svirt_tcg_t domain
  Resolves: RHEL-71270
  - Allow virtqemud use hostdev usb devices conditionally
  Resolves: RHEL-74230
  - Support saving and restoring a VM to/from a block device
  Resolves: RHEL-76138
  - Allow virtnwfilterd dbus chat with firewalld
  Resolves: RHEL-76138
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-62763
  - Allow virtstoraged write to sysfs files
  Resolves: RHEL-44637
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-54019
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77114
  - Allow init mounton crypto sysctl files
  Resolves: RHEL-56250


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
changelog:
  - Rename winbind_rpcd_* types to samba_dcerpcd_*
  Resolves: RHEL-14759
  - Allow samba-dcerpcd work with ctdb cluster
  Resolves: RHEL-14759
  - Revert "Remove socket from unconfined_domain_type allow rule"
  Resolves: RHEL-77327
  - Dontaudit access of virt-related permissive domains
  Resolves: RHEL-77808
  - Add selinux_requires_min macro
  Resolves: RHEL-54715
  - Filter out EPEL related modules
  Resolves: RHEL-73505


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com>- 40.13.26-1.0.1
changelog:
  - Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
    removable_device_t [Orabug: 37139639]
  - Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
  - Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
  - Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
  - Allow cgred_t to get attributes of cgroup filesystems [Orabug: 36176655]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make lsmd and rngd work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com>- 42.1.7-1.0.1
changelog:
  - Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
    removable_device_t [Orabug: 37139639]
  - Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
  - Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
  - Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make lsmd and rngd work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Ilya Okomin <ilya.okomin@oracle.com> - 42.1.7-1.0.2
changelog:
  - Fix specfile triggers for fapolicyd and usbguard DSP modules [Orabug: 38681740] [Orabug: 38579739]


author: EL Errata <el-errata_ww@oracle.com> - 42.1.7-1.0.2.el10_1.1
changelog:
  - Fix specfile triggers for fapolicyd and usbguard DSP modules [Orabug: 38681740] [Orabug: 38579739]
  - Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
    removable_device_t [Orabug: 37139639]
  - Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
  - Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
  - Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make lsmd and rngd work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Vit Mojzis <vmojzis@redhat.com> - 42.1.7-1.2
changelog:
  - Update specfile triggers for DSP modules (RHEL-132492)
  - Update specfile trigger for smartmontools
  - Update specfile trigger for openwsman
  - Move triggerin scriptlets to the parent packages (RHEL-150914)
  - Rebuild policy before running {binsbin|varrun}-convert.sh (RHEL-128498)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Akshata Konala <akshata.konala@oracle.com> - 3.3.35-1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add setroubleshoot-oracle-enterprise.patch to change bug reporting
    URL to bugzilla.oracle.com [Orabug: 29870389]


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1:1.18.1-2
changelog:
  - Fix bats dep on tests subpackage
  - Resolves: RHEL-58990
  - Rebuild on new golang to fix CVE-2025-22871


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6.1
changelog:
  - Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information
    disclosure via authentication credential leakage in error handling


author: Tomas Korbar <tkorbar@redhat.com> - 7:6.10-6.2
changelog:
  - Resolves: RHEL-160665 - squid: Squid: Denial of Service via
    heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)


author: Tomas Korbar <tkorbar@redhat.com> - 7:6.10-6.3
changelog:
  - Resolves: RHEL-160667 - squid: Squid: Denial of Service via
    crafted ICP traffic (CVE-2026-32748)


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2.10.2-3.3
changelog:
  - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.11.1-2.1
changelog:
  - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows
    privilege escalation on AD-joined Linux systems [rhel-10.1.z]


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.15-10.p5
changelog:
  - Resolves: RHEL-164619 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-4
changelog:
  - Add extra SELinux policies.
    Related: RHEL-53967
  - Fix FTBFS, add gmp-devel
    Resolves: RHEL-65460


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-5
changelog:
  - Add extra SELinux policies.
    https://github.com/stefanberger/swtpm/issues/970
    Resolves: RHEL-70835
    Resolves: RHEL-73809


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


