# changelog

author: Julio Faracco <jfaracco@redhat.com> [6.12.0-77.el10]
changelog:
  - redhat: enable CONFIG_WERROR=y (Jan Stancek) [RHEL-85334]
  - redhat: don't enforce WERROR for 3rd-party OOT kmods (Jan Stancek) [RHEL-85334]
  - redhat: make ENABLE_WERROR enable also KVM_WERROR (Jan Stancek) [RHEL-85334]
  - fortify: Hide run-time copy size from value range tracking (Jan Stancek) [RHEL-85334]
  - resolve_btfids: Fix compiler warnings (Jan Stancek) [RHEL-85334]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (Steve Best) [RHEL-45086]
  - platform/x86/intel/ifs: Update documentation with image download path (Steve Best) [RHEL-45086]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (Steve Best) [RHEL-45086]
  - s390/diag: Add memory topology information via diag310 (Mete Durlu) [RHEL-72681]
  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CKI Backport Bot) [RHEL-81452] {CVE-2024-57984}
  - x86/cpu: Add CPU type to struct cpuinfo_topology (Steve Best) [RHEL-64636]
  - x86/amd: Use heterogeneous core topology for identifying boost numerator (Steve Best) [RHEL-64636]
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Myron Stowe) [RHEL-72899]
  - tools/power/x86/intel-speed-select: v1.22 release (Steve Best) [RHEL-74190]
  - tools/power/x86/intel-speed-select: Prefix header search path with sysroot (Steve Best) [RHEL-74190]
  - tools/power/x86/intel-speed-select: Die ID for IO dies (Steve Best) [RHEL-74190]
  - tools/power/x86/intel-speed-select: Fix the condition to check multi die system (Steve Best) [RHEL-74190]
  - tools/power/x86/intel-speed-select: Prevent increasing MAX_DIE_PER_PACKAGE (Steve Best) [RHEL-74190]
  - platform/x86/intel: power-domains: Add Clearwater Forest support (Steve Best) [RHEL-74190]
  - platform/x86: ISST: Correct command storage data length (Steve Best) [RHEL-74190]
  - s390/cio: Do not unregister the subchannel based on DNV (Mete Durlu) [RHEL-87158]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73398]
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (Tony Camuso) [RHEL-82110]
  - ipmi: make ipmi_destroy_user() return void (Tony Camuso) [RHEL-82110]
  - char:ipmi: Fix a not-used variable on a non-ACPI system (Tony Camuso) [RHEL-82110]
  - Get rid of 'remove_new' relic from platform driver struct (Tony Camuso) [RHEL-82110]
  - char:ipmi: Fix the wrong format specifier (Tony Camuso) [RHEL-82110]
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Tony Camuso) [RHEL-82110]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-78.el10]
changelog:
  - redhat: Remove kernel-rt-kvm package (Juri Lelli) [RHEL-62687]
  - nfsd: clear acl_access/acl_default after releasing them (Olga Kornievskaia) [RHEL-81534] {CVE-2025-21796}
  - redhat/configs: Remove CONFIG_VDPA_USER unset config on RHEL10 (Cindy Lu) [RHEL-87716]
  - scripts/nsdeps: get 'make nsdeps' working again (José Expósito) [RHEL-85957]
  - doc: module: revert misconversions for MODULE_IMPORT_NS() (José Expósito) [RHEL-85957]
  - module: Convert default symbol namespace to string literal (José Expósito) [RHEL-85957]
  - scripts/kernel-doc: Get -export option working again (José Expósito) [RHEL-85957]
  - doc: module: Fix documented type of namespace (José Expósito) [RHEL-85957]
  - module: Convert symbol namespace to string literal (José Expósito) [RHEL-85957]
  - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Paolo Abeni) [RHEL-87453]
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Paolo Abeni) [RHEL-87453]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87453]
  - netmem: prevent TX of unreadable skbs (Paolo Abeni) [RHEL-87453] {CVE-2025-21954}
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87453]
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Paolo Abeni) [RHEL-87453]
  - net: set the minimum for net_hotdata.netdev_budget_usecs (Paolo Abeni) [RHEL-87453]
  - flow_dissector: Fix handling of mixed port and port-range keys (Paolo Abeni) [RHEL-87453]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87453] {CVE-2025-21763}
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Paolo Abeni) [RHEL-87453]
  - flow_dissector: use RCU protection to fetch dev_net() (Paolo Abeni) [RHEL-87453]
  - net: let net.core.dev_weight always be non-zero (Paolo Abeni) [RHEL-87453] {CVE-2025-21806}
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Paolo Abeni) [RHEL-87453]
  - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (Paolo Abeni) [RHEL-87453] {CVE-2024-57994}
  - nfsd: validate the nfsd_serv pointer before calling svc_wake_up (Olga Kornievskaia) [RHEL-86641]
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-74484] {CVE-2024-58009}
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74484]
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" (Bastien Nocera) [RHEL-74484]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74484]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74484]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74484] {CVE-2024-54191}
  - Bluetooth: iso: Fix circular lock in iso_listen_bis (Bastien Nocera) [RHEL-74484] {CVE-2024-54460}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74484]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74484]
  - Bluetooth: iso: Always release hdev at the end of iso_listen_bis (Bastien Nocera) [RHEL-74484] {CVE-2024-57879}
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (Bastien Nocera) [RHEL-74484] {CVE-2024-56654}
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74484]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74484]
  - Bluetooth: MGMT: Fix possible deadlocks (Bastien Nocera) [RHEL-74484] {CVE-2024-53207}
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74484]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74484]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74484]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name() (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_conn: Use disable_delayed_work_sync (Bastien Nocera) [RHEL-74484] {CVE-2024-56591}
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74484]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (Bastien Nocera) [RHEL-74484]
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (Bastien Nocera) [RHEL-74484]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74484]
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (Bastien Nocera) [RHEL-74484] {CVE-2024-56604}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Bastien Nocera) [RHEL-74484] {CVE-2024-56605}
  - igb: Fix potential invalid memory access in igb_init_module() (Corinna Vinschen) [RHEL-74378] {CVE-2024-52332}
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix the condition check while programming congestion control (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix buffer overflow in debugfs code (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Congestion control settings using debugfs hook (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-76566]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-76566]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-76566]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-76566]
  - tools headers: Update the socket headers with the kernel sources (Paolo Abeni) [RHEL-87244]
  - net: ipv6: fix TCP GSO segmentation with NAT (Paolo Abeni) [RHEL-87244]
  - net-timestamp: support TCP GSO case for a few missing flags (Paolo Abeni) [RHEL-87244]
  - tcp: Defer ts_recent changes until req is owned (Paolo Abeni) [RHEL-87244]
  - tcp: devmem: don't write truncated dmabuf CMSGs to userspace (Paolo Abeni) [RHEL-87244]
  - tcp: adjust rcvq_space after updating scaling ratio (Paolo Abeni) [RHEL-87244]
  - tcp: correct handling of extreme memory squeeze (Paolo Abeni) [RHEL-87244] {CVE-2025-21710}
  - tcp_cubic: fix incorrect HyStart round start detection (Paolo Abeni) [RHEL-87244]
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset (Paolo Abeni) [RHEL-87244]
  - udp: Fix memory accounting leak. (Paolo Abeni) [RHEL-87213]
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Paolo Abeni) [RHEL-87213]
  - udp: gso: do not drop small packets when PMTU reduces (Paolo Abeni) [RHEL-87213]
  - udp: Deal with race between UDP socket address change and rehash (Paolo Abeni) [RHEL-87213] {CVE-2024-57974}
  - io_uring/sqpoll: zero sqd->thread on tctx errors (CKI Backport Bot) [RHEL-74652] {CVE-2025-21633}
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87160]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87160]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84557]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84557]
  - sctp: Remove unused payload from sctp_idatahdr (Xin Long) [RHEL-84557]
  - sctp: Fix undefined behavior in left shift operation (Xin Long) [RHEL-84557]
  - sctp: Remove commented out code (Xin Long) [RHEL-84557]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84557]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84557]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84557]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84557]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84557]
  - sctp: Prepare sctp_v4_get_dst() to dscp_t conversion. (Xin Long) [RHEL-84557]
  - sctp: Avoid enqueuing addr events redundantly (Xin Long) [RHEL-84557]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-86857]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-86857]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-86857]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-86857]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-86857]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-86857]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-86857]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-86857]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-86857]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-86857]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-86857]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-86857]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-86857]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-86857]
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CKI Backport Bot) [RHEL-81460] {CVE-2025-21738}
  - blackhole_dev: convert self-test to KUnit (Hangbin Liu) [RHEL-81699]
  - treewide: Switch/rename to timer_delete[_sync]() (Kamal Heib) [RHEL-86552]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (Kamal Heib) [RHEL-86552]
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Kamal Heib) [RHEL-86552]
  - ipc/util.c: complete the kernel-doc function descriptions (Rafael Aquini) [RHEL-86254]
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Rafael Aquini) [RHEL-86254]
  - ipc/msg: replace one-element array with flexible array member (Rafael Aquini) [RHEL-86254]
  - do_mq_notify(): saner skb freeing on failures (Rafael Aquini) [RHEL-86254]
  - switch netlink_getsockbyfilp() to taking descriptor (Rafael Aquini) [RHEL-86254]
  - scsi: core: Clear driver private data when retrying request (Ewan D. Milne) [RHEL-86157]
  - scsi: core: Do not retry I/Os during depopulation (Ewan D. Milne) [RHEL-86157]
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Ewan D. Milne) [RHEL-86157]
  - scsi: core: Add passthrough tests for success and no failure definitions (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_debug: Constify sdebug_driver_template (Ewan D. Milne) [RHEL-86157]
  - scsi: transport: sas: spi: Fix kernel-doc for exported functions (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_scan: Add kernel-doc for exported function (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_lib: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_ioctl: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_error: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86157]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_debug: Skip host/bus reset settle delay (Ewan D. Milne) [RHEL-86157]
  - scsi: core: Constify 'struct bin_attribute' (Ewan D. Milne) [RHEL-86157]
  - scsi: iscsi: Remove unused iscsi_create_session() (Ewan D. Milne) [RHEL-86157]
  - scsi: Eliminate scsi_register() and scsi_unregister() usage & docs (Ewan D. Milne) [RHEL-86157]
  - scsi: docs: Remove init_this_scsi_driver() (Ewan D. Milne) [RHEL-86157]
  - scsi: core: Remove the .slave_configure() method (Ewan D. Milne) [RHEL-86157]
  - scsi: Convert SCSI drivers to .sdev_configure() (Ewan D. Milne) [RHEL-86157]
  - scsi: Rename .device_configure() into .sdev_configure() (Ewan D. Milne) [RHEL-86157]
  - scsi: Rename .slave_alloc() and .slave_destroy() (Ewan D. Milne) [RHEL-86157]
  - scsi: scsi_debug: Fix hrtimer support for ndelay (Ewan D. Milne) [RHEL-86157]
  - scsi: bsg: Replace zero-length array with flexible array member (Ewan D. Milne) [RHEL-86157]
  - scsi: sg: Enable runtime power management (Ewan D. Milne) [RHEL-86157]
  - scsi: Switch back to struct platform_driver::remove() (Ewan D. Milne) [RHEL-86157]
  - scsi: libfcoe: Include <linux/prandom.h> instead of <linux/random.h> (Ewan D. Milne) [RHEL-86157]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85132]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85132]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85132]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85132]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85132]
  - crypto: drivers - Switch back to struct platform_driver::remove() (Vladis Dronov) [RHEL-85132]
  - vsock/virtio: discard packets if the transport changes (CKI Backport Bot) [RHEL-77231] {CVE-2025-21669}
  - sched/deadline: Use online cpus for validating runtime (Phil Auld) [RHEL-85609]
  - sched/rt: Update limit of sched_rt sysctl in documentation (Phil Auld) [RHEL-85609]
  - rtla/tests: Test setting default options (Tomas Glozar) [RHEL-73865]
  - rtla/tests: Reset osnoise options before check (Tomas Glozar) [RHEL-73865]
  - rtla: Always set all tracer options (Tomas Glozar) [RHEL-73865]
  - rtla/osnoise: Set OSNOISE_WORKLOAD to true (Tomas Glozar) [RHEL-73865]
  - rtla: Unify apply_config between top and hist (Tomas Glozar) [RHEL-73865]
  - rtla/osnoise: Unify params struct (Tomas Glozar) [RHEL-73865]
  - redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar) [RHEL-77357]
  - tools/build: Use SYSTEM_BPFTOOL for system bpftool (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat: Test BPF mode (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat_top: Use BPF to collect samples (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat_top: Move divisor to update (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat_hist: Use BPF to collect samples (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat: Add BPF skeleton to collect samples (Tomas Glozar) [RHEL-77357]
  - rtla: Add optional dependency on BPF tooling (Tomas Glozar) [RHEL-77357]
  - tools/build: Add bpftool-skeletons feature test (Tomas Glozar) [RHEL-77357]
  - rtla/timerlat: Unify params struct (Tomas Glozar) [RHEL-77357]
  - trace/osnoise: Add trace events for samples (Tomas Glozar) [RHEL-77357]
  - tools/rtla: Add basic test suite (Tomas Glozar) [RHEL-77357]
  - mm: page_owner: use new iteration API (Luiz Capitulino) [RHEL-68306]
  - mm: page_table_check: use new iteration API (Luiz Capitulino) [RHEL-68306]
  - mm: page_ext: add an iteration API for page extensions (Luiz Capitulino) [RHEL-68306]
  - cgroup: Remove steal time from usage_usec (Waiman Long) [RHEL-80669]
  - nfsd: Set technology preview if inter SSC offload is enabled (Benjamin Coddington) [RHEL-79657]
  - tools/rv: Keep user LDFLAGS in build (Tomas Glozar) [RHEL-71546]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57735]
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80057] {CVE-2025-21702}
  - selftests: livepatch: handle PRINTK_CALLER in check_result() (Denis Aleksandrov) [RHEL-85304]
  - livepatch: convert timeouts to secs_to_jiffies() (Denis Aleksandrov) [RHEL-85304]
  - selftests: livepatch: add test cases of stack_order sysfs interface (Denis Aleksandrov) [RHEL-85304]
  - livepatch: Add stack_order sysfs attribute (Denis Aleksandrov) [RHEL-85304]
  - selftests/livepatch: Replace hardcoded module name with variable in test-callbacks.sh (Denis Aleksandrov) [RHEL-85304]
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [RHEL-82260] {CVE-2025-21926}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-79.el10]
changelog:
  - redhat: find-debuginfo workaround is no longer needed on F42 (Jan Stancek) [RHEL-85401]
  - redhat/kernel.spec: use target versions of tools for debugedit and gdb-add-index (Jan Stancek) [RHEL-85401]
  - thermal: intel: int340x: Fix Panther Lake DLVR support (Steve Best) [RHEL-88233]
  - redhat/configs: Adjust CONFIG_TUNE for s390x (Mete Durlu) [RHEL-86680]
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CKI Backport Bot) [RHEL-82520] {CVE-2024-58077}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86517]
  - keys: Fix UAF in key_put() (CKI Backport Bot) [RHEL-86852] {CVE-2025-21893}
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83074]
  - mm/kasan: Convert symbol namespace to string literal [cont.] (Julio Faracco)


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-80.el10]
changelog:
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-72902]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-72902]
  - redhat: Enable virtio-mem (and corresponding kdump code) on s390x (Thomas Huth) [RHEL-72992]
  - s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (Thomas Huth) [RHEL-72992]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (Thomas Huth) [RHEL-72992]
  - virtio-mem: remember usable region size (Thomas Huth) [RHEL-72992]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (Thomas Huth) [RHEL-72992]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (Thomas Huth) [RHEL-72992]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (Thomas Huth) [RHEL-72992]
  - s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (Thomas Huth) [RHEL-72992]
  - s390/sparsemem: Reduce section size to 128 MiB (Thomas Huth) [RHEL-72992]
  - lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (Thomas Huth) [RHEL-72992]
  - virtio-mem: s390 support (Thomas Huth) [RHEL-72992]
  - s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM memory devices (Thomas Huth) [RHEL-72992]
  - Documentation: s390-diag.rst: Document diag500(STORAGE LIMIT) subfunction (Thomas Huth) [RHEL-72992]
  - Documentation: s390-diag.rst: Make diag500 a generic KVM hypercall (Thomas Huth) [RHEL-72992]
  - PM: sleep: Avoid unnecessary checks in device_prepare_smart_suspend() (Mark Langsdorf) [RHEL-80696]
  - PM: runtime: Introduce pm_runtime_blocked() (Mark Langsdorf) [RHEL-80696]
  - PM: Block enabling of runtime PM during system suspend (Mark Langsdorf) [RHEL-80696]
  - PM: Rearrange documentation related to __pm_runtime_disable() (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: Fix bit masking operation (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally (Mark Langsdorf) [RHEL-80696]
  - drivers: core: fix device leak in __fw_devlink_relax_cycles() (Mark Langsdorf) [RHEL-80696]
  - driver core: add a faux bus for use when a simple device/bus is needed (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: core: Restrict power.set_active propagation (Mark Langsdorf) [RHEL-80696]
  - regmap-irq: Add missing kfree() (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: core: Synchronize runtime PM status of parents and children (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: wakeirq: Introduce device-managed variant of dev_pm_set_wake_irq() (Mark Langsdorf) [RHEL-80696]
  - devcoredump: Constify 'struct bin_attribute' (Mark Langsdorf) [RHEL-80696]
  - devcoredump: Define 'struct bin_attribute' through macro (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: Allow configuring the DPM watchdog to warn earlier than panic (Mark Langsdorf) [RHEL-80696]
  - device property: Split property reading bool and presence test ops (Mark Langsdorf) [RHEL-80696]
  - devres: add devm_remove_action_nowarn() (Mark Langsdorf) [RHEL-80696]
  - drivers: core: remove device_link argument from class_compat_[create|remove]_link (Mark Langsdorf) [RHEL-80696]
  - driver core: Move two simple APIs for finding child device to header (Mark Langsdorf) [RHEL-80696]
  - driver core: Introduce device_iter_t for device iterating APIs (Mark Langsdorf) [RHEL-80696]
  - driver core: Correct API device_for_each_child_reverse_from() prototype (Mark Langsdorf) [RHEL-80696]
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Mark Langsdorf) [RHEL-80696]
  - driver core: Rename declaration parameter name for API device_find_child() cluster (Mark Langsdorf) [RHEL-80696]
  - driver core: Correct parameter check for API device_for_each_child_reverse_from() (Mark Langsdorf) [RHEL-80696]
  - driver core: Move true expression out of if condition in 3 device finding APIs (Mark Langsdorf) [RHEL-80696]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Mark Langsdorf) [RHEL-80696]
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (Mark Langsdorf) [RHEL-80696]
  - firmware_loader: Constify 'struct bin_attribute' (Mark Langsdorf) [RHEL-80696]
  - devcoredump: cleanup some comments (Mark Langsdorf) [RHEL-80696]
  - topology: Keep the cpumask unchanged when printing cpumap (Mark Langsdorf) [RHEL-80696]
  - driver core: Introduce an device matching API device_match_type() (Mark Langsdorf) [RHEL-80696]
  - driver core: Remove match_any() (Mark Langsdorf) [RHEL-80696]
  - driver core: Simplify API device_find_child_by_name() implementation (Mark Langsdorf) [RHEL-80696]
  - libnvdimm: Replace namespace_match() with device_find_child_by_name() (Mark Langsdorf) [RHEL-80696]
  - driver core: Constify API device_find_child() and adapt for various usages (Mark Langsdorf) [RHEL-80696]
  - net: qcom/emac: Find sgmii_ops by device_for_each_child() (Mark Langsdorf) [RHEL-80696]
  - bus: fsl-mc: Constify fsl_mc_device_match() (Mark Langsdorf) [RHEL-80696]
  - kernel/range: Const-ify range_contains parameters (Mark Langsdorf) [RHEL-80696]
  - drivers: base: test: Add ...find_device_by...(... NULL) tests (Mark Langsdorf) [RHEL-80696]
  - drivers: base: test: Enable device model tests with KUNIT_ALL_TESTS (Mark Langsdorf) [RHEL-80696]
  - drivers: base: Don't match devices with NULL of_node/fwnode/etc (Mark Langsdorf) [RHEL-80696]
  - regmap: regmap_multi_reg_read(): make register list const (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: sysfs: don't include 'pm_wakeup.h' directly (Mark Langsdorf) [RHEL-80696]
  - PM: sleep: Update stale comment in device_resume() (Mark Langsdorf) [RHEL-80696]
  - regmap: cache: rbtree: use krealloc_array() to replace krealloc() (Mark Langsdorf) [RHEL-80696]
  - regmap: cache: mapple: use kmalloc_array() to replace kmalloc() (Mark Langsdorf) [RHEL-80696]
  - regmap: place foo / 8 and foo % 8 closer to each other (Mark Langsdorf) [RHEL-80696]
  - regmap: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-80696]
  - regmap: cache: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-80696]
  - regmap: detach regmap from dev on regmap_exit (Mark Langsdorf) [RHEL-80696]
  - regmap: Use correct format specifier for logging range errors (Mark Langsdorf) [RHEL-80696]
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info() (Mark Langsdorf) [RHEL-80696]
  - drivers: core: fw_devlink: Fix excess parameter description in docstring (Mark Langsdorf) [RHEL-80696]
  - driver core: class: Correct WARN() message in APIs class_(for_each|find)_device() (Mark Langsdorf) [RHEL-80696]
  - cacheinfo: Use of_property_present() for non-boolean properties (Mark Langsdorf) [RHEL-80696]
  - drivers: core: fw_devlink: Make the error message a bit more useful (Mark Langsdorf) [RHEL-80696]
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic (Mark Langsdorf) [RHEL-80696]
  - driver core: constify devlink class (Mark Langsdorf) [RHEL-80696]
  - driver core: Put device attribute @wakeup_last_time_ms and its show() together (Mark Langsdorf) [RHEL-80696]
  - cacheinfo: Don't opencode per_cpu_cacheinfo() (Mark Langsdorf) [RHEL-80696]
  - driver core: auxiliary bus: Spelling s/pecific/specific/ (Mark Langsdorf) [RHEL-80696]
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Mark Langsdorf) [RHEL-80696]
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock (Mark Langsdorf) [RHEL-80696]
  - regmap: kunit: Fix repeated test param (Mark Langsdorf) [RHEL-80696]
  - PM: QoS: Export dev_pm_qos_read_value (Mark Langsdorf) [RHEL-80696]
  - devres: Fix page faults when tracing devres from unloaded modules (Mark Langsdorf) [RHEL-80696]
  - drivers/base: Remove unused auxiliary_find_device (Mark Langsdorf) [RHEL-80696]
  - firmware_loader: Reorganize kerneldoc parameter names (Mark Langsdorf) [RHEL-80696]
  - PM: domains: Support required OPPs in dev_pm_domain_attach_list() (Mark Langsdorf) [RHEL-80696]
  - OPP: Rework _set_required_devs() to manage a single device per call (Mark Langsdorf) [RHEL-80696]
  - driver core: Add device probe log helper dev_warn_probe() (Mark Langsdorf) [RHEL-80696]
  - regmap: Specifically test writing 0 as a value to sparse caches (Mark Langsdorf) [RHEL-80696]
  - regmap-irq: Consistently use memset32() in regmap_irq_thread() (Mark Langsdorf) [RHEL-80696]
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO (Sabrina Dubroca) [RHEL-84543]
  - xfrm: state: fix out-of-bounds read during lookup (Sabrina Dubroca) [RHEL-84543]
  - xfrm: delete intermediate secpath entry in packet offload mode (Sabrina Dubroca) [RHEL-84543]
  - xfrm: Fix the usage of skb->sk (Sabrina Dubroca) [RHEL-84543]
  - xfrm: fix tunnel mode TX datapath in packet offload mode (Sabrina Dubroca) [RHEL-84543]
  - xfrm_output: Force software GSO only in tunnel mode (Sabrina Dubroca) [RHEL-84543]
  - xfrm: prevent high SEQ input in non-ESN mode (Sabrina Dubroca) [RHEL-84543]


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-4
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - virt-host-validate: Allow longer list of CPU flags
  - vmx: Be even more lax when trying to comprehend serial ports
  - vmx: Do not require all ID data for VMWare Distributed Switch
  - tests: vhostuser: add virtiofsd json descriptor
  - tests: qemuxmlconf: adjust test case to new virtiofsd
  - qemu: fill capabilities for virtiofsd
  - qemu: do not use deprecated options for new virtiofsd
  - qemu: migration: allow migration for virtiofs
  - virt-host-validate: Drop extra "PASS"
  - qemu: Don't leave beingDestroyed=true on inactive domain


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - qemu: virtiofs: cache: use 'never' instead of 'none'
  - qemu_domain: Strip <acpi/> from s390(x) definitions
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390
  - vsh: Allow vshReadlineInit() to be called multiple times


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-45518, RHEL-49607, RHEL-50968, RHEL-52449, RHEL-54235
      RHEL-55707, RHEL-55749, RHEL-55769, RHEL-56699


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61752)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61752)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61752)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61752)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61752)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-29893)
  - The rebase also fixes the following bugs:
      RHEL-30177, RHEL-35244, RHEL-39024


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-3
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.6-1
changelog:
  - Rebase to libguestfs 1.55.6
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.8-1
changelog:
  - Rebase to libguestfs 1.55.8
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


