# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-6
changelog:
  - Resolves: RHEL-117764 - Replication online reinitialization of a large
    database gets stalled. [rhel-10.1.z]
  - Resolves: RHEL-117773 - When the server restarts after a crash, the RFE
    assumes memberof should be recomputed. It triggers a memberof fixup task,
    dirsrv became unresponsive. [rhel-10.1.z]
  - Resolves: RHEL-123233 - Improve the way to detect asynchronous operations
    in the access logs [rhel-10.1.z]
  - Resolves: RHEL-123246 - Attribute uniqueness is not enforced upon modrdn
    operation [rhel-10.1.z]
  - Resolves: RHEL-123260 - Typo in errors log after a Memberof fixup task.
    [rhel-10.1.z]
  - Resolves: RHEL-123274 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX [rhel-10.1.z]
  - Resolves: RHEL-123281 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
    [rhel-10.1.z]
  - Resolves: RHEL-123370 - IPA health check up script shows time skew is
    over 24 hours [rhel-10.1.z]
  - Resolves: RHEL-123768 - 389-ds-base OpenScanHub Leaks Detected
    [rhel-10.1.z]
  - Resolves: RHEL-123854 - Units for changing MDB max size are not
    consistent across different tools [rhel-10.1.z]
  - Resolves: RHEL-123895 - Improve output dsctl dbverify when backend does
    not exist [rhel-10.1.z]
  - Resolves: RHEL-123898 - [WebUI] Replication tab crashes after enabling
    replication as a consumer [rhel-10.1.z]
  - Resolves: RHEL-126554 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly [rhel-10.1.z]
  - Resolves: RHEL-129560 - Online initialization of consumers fails with
    error -23 [rhel-10.1.z]
  - Resolves: RHEL-129581 - Fix paged result search locking [rhel-10.1.z]
  - Resolves: RHEL-138484 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12 [rhel-10.1.z]
  - Resolves: RHEL-138487 - RetroCL plugin generates invalid LDIF
    [rhel-10.1.z]
  - Resolves: RHEL-140091 - Upgrading IDM  to latest version: 389-ds-base and
    ipa-server breaks replication  [rhel-10.1.z]
  - Resolves: RHEL-140277 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes. [rhel-10.1.z]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-7
changelog:
  - Bump version to 3.1.3-7
  - Resolves: RHEL-117764 - Replication online reinitialization of a large
    database gets stalled. [rhel-10.1.z]
  - Resolves: RHEL-123274 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX [rhel-10.1.z]
  - Resolves: RHEL-123281 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
    [rhel-10.1.z]
  - Resolves: RHEL-123370 - IPA health check up script shows time skew is
    over 24 hours [rhel-10.1.z]
  - Resolves: RHEL-129560 - Online initialization of consumers fails with
    error -23 [rhel-10.1.z]
  - Resolves: RHEL-137071 - CVE-2025-14905 389-ds-base: Remote Code Execution
    and Denial of Service via heap buffer overflow [rhel-10.1.z]
  - Resolves: RHEL-138484 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12 [rhel-10.1.z]
  - Resolves: RHEL-140091 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication  [rhel-10.1.z]
  - Resolves: RHEL-142981 - Scalability issue of replication online
    initialization with large database [rhel-10.1.z]
  - Resolves: RHEL-146896 - memory corruption in alias entry plugin
    [rhel-10.1.z]
  - Resolves: RHEL-147213 - Access logs are not getting deleted as
    configured. [rhel-10.1.z]
  - Resolves: RHEL-150908 - Remove memberof_del_dn_from_groups from MemberOf
    plugin [rhel-10.1.z]


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Always reset retries when unblocking children or ports (RHEL-80475)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79829)
  - Fix crash in imagemode with SELinux enforced (RHEL-77157)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com 1.2.27-1
changelog:
  - Update to 1.2.27 version
  - Support leftsendcert in X.509-Based VPN (RHEL-110773)
  - Add support for nm-auto-defaults + symetric import/export
  - Support rightca in ipsec section
  - Esp param properly exported


author: Vladimír Beneš <vbenes@redhat.com 1.2.27-1
changelog:
  - Update to 1.2.27 version
  - Support leftsendcert in X.509-Based VPN (RHEL-110774)
  - Add support for nm-auto-defaults + symetric import/export (RHEL-118845)
  - Support rightca in ipsec section
  - Esp param properly exported


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support leftprotoport and rightprotoport options. (RHEL-130909)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131235)
  - Fix import connection with RSA key. (RHEL-127867)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)
  - Resolves: RHEL-66144


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.1-10
changelog:
  - Fix a typo in the License expression
  - Fix build not respecting distribution compiler flags; this means executables
    are now PIE, and the debuginfo package is now useful


author: Radovan Sroka <rsroka@redhat.com> - 0.18.6-8
changelog:
  RHEL 10.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4320


author: Attila Lakatos <alakatos@redhat.com> - 0.18.6-8.2
changelog:
  RHEL 10.0.Z ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-108929


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.25-1
changelog:
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79800
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79802


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.26-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80302
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80011
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80232
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80011


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.27-1
changelog:
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48821
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48821
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48821
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48821
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48821
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48821


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.28-1
changelog:
  - network: update NM autoconnections configuration for centos (rvykydal)
    Resolves: RHEL-67815
  - Run restorecon after copying logs (champetier.etienne)
    Resolves: RHEL-86788
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: RHEL-83924
    Resolves: INSTALLER-4148
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-83931
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-83931
  - network: disable autoconnections on RHEL also for BOOTIF option (rvykydal)
    Resolves: RHEL-69400
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83576


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.29-1
changelog:
  - liveinst: Propagate the AT-SPI bus address to Anaconda for Wayland (neal)
    Resolves: RHEL-88645
  - Revert "Do not copy resolv.conf to target system at the end of installation"
    (mkolman)
    Resolves: RHEL-84110
  - rpm_ostree/installation.py: fix image deployment on s390x (nikita)
    Resolves: RHEL-88558


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.30-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-83924
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85415
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85415
  - ruff: enable isort rules and autofix all isort warnings (jkonecny)
    Resolves: RHEL-85415


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.31-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-79961
  - flatpak: Fix Flatpak source generation from DNF (jkonecny)
    Related: RHEL-75804
  - flatpak: Add constants for Flatpak (jkonecny)
    Related: RHEL-75804
  - flatpak: Change log level for source processing (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve log for setting refs for install (jkonecny)
    Related: RHEL-75804
  - flatpak: Improve documentation (jkonecny)
    Related: RHEL-75804
  - flatpak: `NoSourceError` to `SourceSetupError` (jkonecny)
    Related: RHEL-75804
  - Fix imports in flatpak payload (jkonecny)
    Related: RHEL-75804
  - When installing Flatpaks from a local repository, disable download (otaylor)
    Related: RHEL-75804
  - Add additional logging to Flatpak code (jkonecny)
    Related: RHEL-75804
  - Fix directory where flatpak blobs are stored (jkonecny)
    Related: RHEL-75804
  - Add FlatpakManager tests (jkonecny)
    Related: RHEL-75804
  - Improve FlatpakManager testing (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak source.py (jkonecny)
    Related: RHEL-75804
  - Add tests for Flatpak payload utils (jkonecny)
    Related: RHEL-75804
  - Extract flatpak.source utils to a separate module (jkonecny)
    Related: RHEL-75804
  - Add Flatpak tests for the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Do not allow any sources for Flatpak payload (jkonecny)
    Related: RHEL-75804
  - Support payload with no default source (jkonecny)
    Related: RHEL-75804
  - Add new API for Flatpak to CalculateSizeWithTask (jkonecny)
    Related: RHEL-75804
  - Add side_payload to PayloadBase object (jkonecny)
    Related: RHEL-75804
  - Add more logs for easier Flatpak module debugging (jkonecny)
    Related: RHEL-75804
  - Call calculate_size of the Flatpak manager (jkonecny)
    Related: RHEL-75804
  - Improve logging of the Flatpak module (jkonecny)
    Related: RHEL-75804
  - Support Flatpak preinstallation as part of a DNF install (otaylor)
    Resolves: RHEL-75804
  - anaconda.spec: Add Flatpak client to Requires (otaylor)
    Resolves: RHEL-75804
  - Extract pick_download_location(), calculate_required_space() utilities
    (otaylor)
    Resolves: RHEL-75804
  - Move hardcoded flatpak remote to configuration (jkonecny)
    Related: RHEL-75804
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-83926


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.32-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101058
  - Remove unused Flatpak manager code (jkonecny)
    Resolves: RHEL-106503
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
    Resolves: RHEL-106503
  - Update to the approved version of the blivet change (a.badger)
    Resolves: RHEL-69878
  - Do not duplicate the DEVICE_TYPES enum in storage_constraints (a.badger)
    Resolves: RHEL-69878
  - Retrieve DEVICE_TYPES from blivet. (a.badger)
    Resolves: RHEL-69878


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79256)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105572)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-12
changelog:
  - RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
    - fix submount shutdown race.
    - fix deadlock in master_notify_submount().
    - fix lock ordering deadlock in expire_cleanup().
  - Resolves: RHEL-87525


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-13
changelog:
  - RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
  - Resolves: RHEL-90571


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-10.1
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Jan Friesse <jfriesse@redhat.com> - 1.2-1
changelog:
  - Resolves: RHEL-22016
  - Resolves: RHEL-40410

  - New upstream release (RHEL-40410)
  - Add support for GnuTLS and stop using libgcrypt (RHEL-22016)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/ee5b574)
  - fixes "buildah: create parent directories of mount targets with mode 0755 - [RHEL-10.1]  0day"
  - Resolves: RHEL-115167


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/2ece502)
  - fixes "[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-10.1.z]"
  - Resolves: RHEL-126634


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/e363f79)
  - fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-10.1.z]"
  - Resolves: RHEL-132841


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/f85ff89)
  - fixes "CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-10.1.z]"
  - Resolves: RHEL-134777


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Jon Maloy <jmaloy@redhat.com> - 5.0.1-7
changelog:
  - Fix CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-141551
  - Fix CVE-2025-68114 (memory corruption)
    Resolves: RHEL-137747


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-91788)
  - improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
  - fix sourcedir reloading to not multiply sources (RHEL-95017)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Yasmin Valim <ydesouza@redhat.com> - 0.24.0-4
changelog:
  - Check if firstboot args are defined and add them manually 
    Backport https://github.com/coreos/coreos-installer/pull/1699


author: Huijing Hei <hhei@redhat.com> - 0.24.0-5
changelog:
  - rootmap: Inject `mpath.wwid=$WWID` when on multipath
    Backport https://github.com/coreos/coreos-installer/pull/1676/commits/a40af0a3ec13c4fd49b34317e80f6c0bc845b46a
    Resolves RHEL-127858


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2.1
changelog:
  - Resolves: RHEL-163801
  - Resolves: RHEL-163822

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.23.1
  - fixes "Bump crun to 1.23.1 in RHEL 10.0"
  - Resolves: RHEL-110663


author: Jindrich Novy <jnovy@redhat.com> - 1.27-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.27
  - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.1.z]
  - Resolves: RHEL-161416


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12.1
changelog:
  - RHEL-129721 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129715 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-7
changelog:
  - Add 0018-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0019-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0020-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0021-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0022-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0023-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0024-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0025-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0026-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0027-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  - Add 0028-multipath-clean-up-find_multipaths-documentation.patch
  - Add 0029-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82180 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-82180


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-9
changelog:
  - Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82535


author: Filip Suba <fsuba@redhat.com> - 0.9.9-11
changelog:
  - Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103112 ("Update multipath builtin config to add new
      device defaults [rhel-10]")
  - Resolves: RHEL-103112


author: Lin Li <lilin@redhat.com> - 0.9.9-12
changelog:
  Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
    * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
      nvme" results in segfault")
  Resolves: RHEL-107436


author: Lin Li <lilin@redhat.com> - 0.9.9-12.1
changelog:
  - Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
  - Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
  - Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0050-libmultipath-rename-prflag_value-enums.patch
  - Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
  - Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
  - Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  - Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-125288 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10.1.z]")
  - Resolves: RHEL-125288


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Ales Nezbeda <anezbeda@redhat.com> - 0.8.8-49
changelog:
  - Fix SPDX license tag based on further research
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
  - Related: RHEL-37885


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-16.1
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161625)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162273)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161664)


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-11
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66234]
  - Resolves: RHEL-66234
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-12
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-64642]
  - Resolves: RHEL-64642
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72446]
  - Resolves: RHEL-72446
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-1
changelog:
  - Rebase to edk2-stable202502 [RHEL-75592]
  - Resolves: RHEL-75592
    (rebase to edk2-stable202502)
  - Resulves: RHEL-82646
    (fix typo in fwcfg file name)
  - Resolves: RHEL-82837
    (The newer revocation file and Server 2025 required to update it)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2.el10_1.1
changelog:
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-121876]
  - Resolves: RHEL-121876
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-10.1.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2.el10_1.2
changelog:
  - edk2-Bumped-to-OpenSSL-3.5.1-6.patch [RHEL-115882]
  - Resolves: RHEL-115882
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.1.z])


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Abhi Das <adas@redhat.com> - 1.8.2-2
changelog:
  - Rebase to 1.8.2-2 for zstd and multithreading support and
    Remove erroneously added gating.yaml
    Resolves: RHEL-68370


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 10.1 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-94540
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-94536
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-94538
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-94537
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-105425


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.3-106
changelog:
  - Add /var/lib/fapolicyd to tmpfiles
  Resolves: RHEL-104873
  - Allow fapolicyd to connect to systemd-machined
  Resolves: RHEL-77071


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-5
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76495


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83520


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-7
changelog:
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79799


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-13.4
changelog:
  - bundled pyasn1: replace with dependency to fix CVE-2026-30922
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-157186, RHEL-155667


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Release Engineering <releng@rockylinux.org> - 140.10.0-1
changelog:
  - Add custom Rocky Linux firefox prefs (Louis Abel)
  - Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
  - Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Parag Nemade <pnemade AT redhat DOT com> - 20230101-14
changelog:
  - Resolves: RHEL-138159
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138144
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138126
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-5.1
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142413, RHEL-142397, RHEL-142381, RHEL-142365, RHEL-142349
    Resolves: RHEL-142333, RHEL-142317


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-5.2
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147912, RHEL-148815, RHEL-148859, RHEL-148892, RHEL-148973


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-5.4
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147948, RHEL-147949, RHEL-147956, RHEL-147963, RHEL-147964
    Resolves: RHEL-147972, RHEL-147979, RHEL-147984, RHEL-147985, RHEL-148898
    Resolves: RHEL-148978, RHEL-148984, RHEL-149051, RHEL-155979


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-5.6
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162946, RHEL-162962


author: Jindrich Novy <jnovy@redhat.com> - 1.16-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16
  - fixes "Update fuse-overlayfs to 1.16 [rhel-10.1.z]"
  - Resolves: RHEL-128522


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-57
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-109536)
  - Upstream commit: fffc2df8a3e2c8cda2991063d23086360268b777
  - Extend struct r_debug to support multiple namespaces (RHEL-101985)
  - Fix a potential crash in the dynamic loader when processing specific
    symbol versions (RHEL-109683)
  - Signal la_objopen for ld.so with dlmopen (RHEL-109693)
  - Switch to main malloc after final ld.so self-relocation (RHEL-109703)
  - Prevent ld.so from asserting and crashing during audited library loads
    (RHEL-109702)
  - x86-64: Provide GLIBC_ABI_DT_X86_64_PLT symbol version (RHEL-109621)
  - x86-64: Provide GLIBC_ABI_GNU2_TLS symbol version (RHEL-109625)
  - Ensure fallback initialization of ctype TLS data pointers to fix segfaults in
    programs using dlmopen or auditors (RHEL-72018)
  - Handle load segment gaps in _dl_find_object (RHEL-104854)
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Takao Fujiwara <tfujiwar@redhat.com> - 2018.1-17
changelog:
  - Resolve RHELPLAN-170235 Fix OpenScanHub report
  - Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
  - Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
  - Fix to check return value of g_setenv() with CWE-252


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-1.el10_1.1
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-21
changelog:
  - Resolves RHEL-125631: CVE-2025-58183
  - Resolves RHEL-132760: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-144948: CVE-2026-21721
  - Resolves RHEL-146721: CVE-2025-61726
  - Resolves RHEL-146926: CVE-2025-61729
  - Resolves RHEL-147351: CVE-2025-61728
  - Resolves RHEL-149227: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Sam Feifer <sfeifer@redhat.org> - 5.3.0-2
changelog:
  - Resolves RHEL-146722: CVE-2025-61726
  - Resolves RHEL-146927: CVE-2025-61729
  - Resolves RHEL-149228: CVE-2025-68121


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Therese Cornell <tcornell@redhat.com> - 2.12-29.1
changelog:
  - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
  - Resolves: #RHEL-141580


author: Release Engineering <releng@rockylinux.org> - 1:2.12-29.2.rocky.0.2
changelog:
  - Update certs (jdieter)
  - Replace sbat with Rocky Linux sbat (label)
  - Change bug tracker URL (label)
  - Force appended sig size for ppc64le (label)


author: Josue Hernandez <josherna@redhat.com> - 2.12-29.3
changelog:
  - kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
  - Resolves: #RHEL-155287


author: Release Engineering <releng@rockylinux.org> - 2.12-29
changelog:
  - Replace sbat with Rocky Linux sbat (label)
  - Change bug tracker URL (label)
  - Add missing riscv64 support (label)


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
changelog:
  - new version 2.4.63
  - Resolves: RHEL-76358 - httpd rebase to 2.4.63
  - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1
  - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4.2
changelog:
  - Resolves: RHEL-125894 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4.3
changelog:
  - Resolves: RHEL-135052 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135035 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134467 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 31-4
changelog:
  - Rebuilt to fix: 
    - CVE-2025-61726
    - CVE-2025-61729
    - CVE-2025-68121
    - RHEL-146725
    - RHEL-146930
    - RHEL-149231


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.25-4
changelog:
  - replace iotop https://fedoraproject.org/wiki/Changes/Replace_iotop_with_iotop-c
  - iotop-c executable renamed back to iotop


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-84648 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)
  - Resolves: RHEL-84279 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-84275 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-81200 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-67686 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-67633 ipa-healthcheck has tests which call fips-mode-setup
  - Resolves: RHEL-4845 Protect *all* IPA service principals


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24.1
changelog:
  - Resolves: RHEL-118447 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24.2
changelog:
  - Resolves: RHEL-141303 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141317 Memory leaks in IPA plugins
  - Resolves: RHEL-129968 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24.3
changelog:
  - Resolves: RHEL-155026 Pagure #9953: Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153624 Pagure #9854: Erroneous case-sensitivity in offline DSE lookup
  - Resolves: RHEL-151763 Include test fixes for 10.1.z in python3-ipatests


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Jan Macku <jamacku@redhat.com> - 20240905-3
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169611
  - Resolves: RHEL-133215
  - Resolves: RHEL-146648
  - Resolves: RHEL-148326
  - Resolves: RHEL-148828
  - Resolves: RHEL-157090
  - Resolves: RHEL-161216
  - Resolves: RHEL-161332
  - Resolves: RHEL-169614


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Resolves: RHEL-155000
  - Resolves: RHEL-146649
  - Resolves: RHEL-148327
  - Resolves: RHEL-148830
  - Resolves: RHEL-155044


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-150976


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-4
changelog:
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155327
  - Resolves: RHEL-155337
  - Resolves: RHEL-155339
  - Related: RHEL-155000
  - Related: RHEL-146649
  - Related: RHEL-148327
  - Related: RHEL-148830


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-1
changelog:
  - Update to jdk-25.0.3+9 (GA)
  - Update release notes to 25.0.3+9
  - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
  - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
  - Drop local HarfBuzz patch now JDK-8375057 is included upstream
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Bump tzdata version to 2026a following JDK-8379035
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169620
  - Resolves: RHEL-157091
  - Resolves: RHEL-161217
  - Resolves: RHEL-161333
  - Resolves: RHEL-169613


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Jan Stancek <jstancek@redhat.com> [6.12.0-124.5.1.el10_1]
changelog:
  - scsi: mpi3mr: Update driver version to 8.15.0.5.50 (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Fix premature TM timeouts on virtual drives (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Update MPI headers to revision 37 (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Fix I/O failures during controller reset (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Fix controller init failure on fault during queue creation (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Fix device loss during enclosure reboot due to zero link speed (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Fix race between config read submit and interrupt completion (Chandrakanth Patil) [RHEL-111654]
  - scsi: mpi3mr: Correctly handle ATA device errors (Chandrakanth Patil) [RHEL-111654]
  - selftests: tls: add tests for zero-length records (CKI Backport Bot) [RHEL-114328] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (CKI Backport Bot) [RHEL-114328] {CVE-2025-39682}
  - cxgb4: Avoid removal of uninserted tid (Jakub Ramaseuski) [RHEL-75570]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Scott Mayhew) [RHEL-112414]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113338] {CVE-2025-38718}
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol zgid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_tx_peek_release_desc_batch to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_fill_cb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_can_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_alloc_batch to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xp_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xfrm_aead_get_byname to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_return_frame_bulk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_return_buff to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_flush_frame_bulk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __wake_up_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol wait_for_completion_io_timeout to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vzalloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __vmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vmalloc_array_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_sysctl_table to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __trace_trigger_soft_disabled to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __trace_set_current_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_print_bitmask_seq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_write_msr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_sched_set_state_tp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_read_msr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_array_set_clr_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_array_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol trace_array_get_by_name to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tls_encrypt_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tls_device_sk_destruct to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timer_shutdown_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timer_shutdown to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tcp_gro_complete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol system_unbound_wq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol switchdev_handle_port_obj_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol switchdev_handle_port_obj_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol switchdev_handle_port_attr_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol submit_bio to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol strcasecmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol static_key_enable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol static_key_disable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol starget_for_each_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol smp_call_function to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol slab_build_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sk_skb_reason_drop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __skb_gso_segment to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_copy_header to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_copy_expand to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol skb_add_rx_frag_netmem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_pcopy_to_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_pcopy_from_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_nents to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_miter_stop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_miter_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_miter_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sg_copy_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_memory_wc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __seq_puts to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol send_sig_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol secure_tcpv6_seq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol secure_tcp_seq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol secpath_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_unblock_requests to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_scan_target to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_scan_host to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_sanitize_inquiry_string to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_rescan_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_remove_target to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_print_command to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_normalize_sense to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __scsi_iterate_devices to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_is_host_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_host_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_get_vpd_page to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_dma_unmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_dma_map to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_device_set_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_device_lookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_device_from_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_build_sense_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_build_sense to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_block_requests to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol scmd_printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol schedule_timeout_uninterruptible to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_rphy_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_rphy_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_remove_host to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_release_transport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_delete_phy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_delete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_alloc_num to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_add_phy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_port_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_phy_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_phy_delete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_phy_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_phy_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_expander_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_end_device_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_attach_transport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol sas_ata_ncq_prio_supported to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_walk_stop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_walk_start_check to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_walk_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_walk_exit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_walk_enter to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_init_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol reset_devices to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol request_firmware_nowait to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rep_movs_alternative to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_user_mmap_io to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_user_mmap_entry_remove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_user_mmap_entry_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_user_mmap_entry_insert to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_user_mmap_entry_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_read_gid_l2_fields to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_query_gid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __rdma_block_iter_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __rdma_block_iter_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rdma_alloc_hw_stats_struct to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol queue_limits_commit_update to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pv_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __put_user_nocheck_4 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __put_devmap_managed_folio_refs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ptp_cancel_worker_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __pm_runtime_idle to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_validate_pause to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_support_asym_pause to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_stop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_start_aneg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_set_max_speed to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_set_asym_pause to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_ethtool_ksettings_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_ethtool_ksettings_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_disconnect to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_connect to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol phy_attached_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcpu_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcix_set_mmrbc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_write_config_byte to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_vpd_find_ro_info_keyword to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_vpd_check_csum to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_vpd_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_try_set_mwi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_set_mwi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_reset_bus to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_read_vpd to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcim_iomap_table to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcim_iomap_regions to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcim_enable_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_irq_get_affinity to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_get_slot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_get_domain_bus_and_slot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_set_readrq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_ptm_enabled to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_ptm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_get_readrq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_capability_write_word to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_capability_clear_and_set_word_unlocked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pcie_capability_clear_and_set_word_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_disable_rom to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_dev_present to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_clear_mwi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_choose_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_alloc_irq_vectors_affinity to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_ullong to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_short to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_put_unrefed_netmem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_disable_direct_recycling to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_pool_alloc_frag to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol pack_fields_u8 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_unregister_targetport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_register_targetport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_rcv_fcp_req to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_rcv_fcp_abort to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvmet_fc_invalidate_host to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_unregister_remoteport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_unregister_localport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_set_remoteport_devloss to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_rescan_remoteport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_register_remoteport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_register_localport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_rcv_ls_req to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nvme_fc_io_getuuid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_set_tso_max_segs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_receive_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_queue_set_napi to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_get_num_default_rss_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol net_dim_get_rx_moderation to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_walk_all_upper_dev_rcu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_lower_get_next to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_core_stats_inc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __netdev_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __napi_alloc_frag_align to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mpi_read_raw_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mpi_powm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mpi_get_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mpi_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mpi_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mlx5_core_uplink_netdev_event_replay to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mlx5_core_access_reg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mlx5_blocking_notifier_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mlx5_blocking_notifier_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_kmalloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_kfree to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_create_node_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mempool_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memdup_user_nul to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memcpy_toio to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memcpy_fromio to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol memchr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdio_mii_ioctl to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __mdiobus_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_get_phy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_c45_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_c45_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol mdio45_probe to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol local_clock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __list_del_entry_valid_or_report to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __list_add_valid_or_report to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol libie_rx_pt_lut to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol libeth_rx_recycle_slow to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol libeth_rx_fq_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol libeth_rx_fq_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_snapshot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_seconds to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get_raw_ts64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_create_worker_on_node to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ksize to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol krealloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmemdup_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmem_cache_create_args to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmem_cache_alloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmalloc_size_roundup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_node_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_large_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_large_node_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_cache_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __kmalloc_cache_node_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kfree_sensitive to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol iter_div_u64_rem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_set_affinity to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_poll_sched to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_poll_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_poll_complete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_modify_status to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ipv6_ext_hdr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ipv6_chk_addr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __ipv6_addr_type to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip_tos2prio to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __ip_dev_find to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip_compute_csum to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __iowrite64_copy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol iowrite32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __ioread32_copy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ioread32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __inet_lookup_established to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __inet6_lookup_established to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol in_dev_finish_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_unregister_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_umem_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_umem_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_umem_find_best_pgsz to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_umem_dmabuf_get_pinned to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_sg_to_pages to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_set_device_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_register_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_query_port to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_modify_qp_is_ok to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_get_eth_speed to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_dispatch_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ibdev_warn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ibdev_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_device_set_netdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_device_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_device_get_by_netdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ibdev_err to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ib_dealloc_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _ib_alloc_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol i2c_smbus_write_byte_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol i2c_smbus_read_byte_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol i2c_new_client_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol i2c_del_adapter to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol i2c_bit_add_bus to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hwmon_notify_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hwmon_device_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol high_memory to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_zeroed_page_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __get_user_nocheck_4 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __get_user_4 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_random_u32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_random_u16 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_free_pages_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol get_cpu_idle_time to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __fortify_panic to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_tcp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_l2tpv3 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_icmp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_opts to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fixed_size_llseek to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol find_get_pid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_vport_terminate to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_vport_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_remove_host to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_remote_port_rolechg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_remote_port_delete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_remote_port_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_release_transport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_host_post_vendor_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_host_post_event to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_host_fpin_rcv to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_get_event_number to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_eh_timed_out to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_eh_should_retry_cmd to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_block_scsi_eh to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_block_rport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fc_attach_transport to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol fasync_helper to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_rxfh_context_lost to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_puts to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_params_from_link_mode to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_forced_speed_maps_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dynamic_ibdev_dbg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol do_wait_intr_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol do_trace_write_msr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol do_trace_read_msr to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dmi_first_match to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_unmap_sg_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dma_sync_single_for_device to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dma_sync_single_for_cpu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_map_sg_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_get_required_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol disable_irq_nosync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_trans_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_printk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_notice to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_mdiobus_alloc_size to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_region_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_region_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_port_fn_devlink_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_param_driverinit_value_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_param_driverinit_value_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_nested_devlink_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_version_stored_put_ext to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_version_running_put_ext to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_info_board_serial_number_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_reporter_recovery_done to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_u8_pair_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_obj_nest_start to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_obj_nest_end to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_dump_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_wakeup_disable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_show_string to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_set_wakeup_capable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_initialize to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol device_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_addr_mod to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_create_file_full to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_create_devm_seqfile to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcb_ieee_getapp_prio_dscp_mask_map to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcb_ieee_getapp_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol current_work to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crc_t10dif to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpumask_next_wrap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpuhp_state_remove_instance to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpuhp_state_add_instance to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol const_pcpu_hot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol config_group_init_type_name to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol config_group_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol configfs_unregister_subsystem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol configfs_register_subsystem to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol class_create to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol byte_rev_table to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol BUG_func to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_update to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_remove to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_lookup to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_last to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_insert to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_get_prev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_geo64 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_geo32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol btree_destroy to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bsg_setup_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bsg_remove_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bsg_job_done to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bsearch to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run8 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run5 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_queue_rq_timeout to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_mq_unique_tag to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_mq_tagset_busy_iter to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_mq_map_hw_queues to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol blkcg_get_fc_appid to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _bin2bcd to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bdev_thaw to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bdev_freeze to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol __alloc_pages_noprof to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_cpumask_var_node to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-113009]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-113009]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.9.1.el10_1]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
  - smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
  - smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
  - smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
  - cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
  - kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
  - redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
  - xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
  - s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
  - s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
  - mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
  - vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
  - NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.10.1.el10_1]
changelog:
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
  - selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
  - tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
  - ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.11.1.el10_1]
changelog:
  - of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
  - redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
  - KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
  - x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
  - kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
  - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
  - x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.12.1.el10_1]
changelog:
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.13.1.el10_1]
changelog:
  - NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
  - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
  - Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
  - smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
  - smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
  - smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
  - smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
  - fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
  - ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]


author: Release Engineering <releng@rockylinux.org> - 6.12.0-124.13.1
changelog:
  - Porting to Rocky Linux 10, debranding and Rocky Linux branding
  - Add partial riscv64 support for build root
  - Provide basic VisionFive 2 support


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.14.1.el10_1]
changelog:
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
  - nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.15.1.el10_1]
changelog:
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
  - wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
  - wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
  - wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.16.1.el10_1]
changelog:
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.17.1.el10_1]
changelog:
  - x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
  - io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.18.1.el10_1]
changelog:
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
  - cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.19.1.el10_1]
changelog:
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
  - Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
  - can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.20.1.el10_1]
changelog:
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
  - net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
  - idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
  - crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
  - KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
  - crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
  - s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
  - s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.21.1.el10_1]
changelog:
  - CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
  - net: tun: Update napi->skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.22.1.el10_1]
changelog:
  - ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
  - sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.23.1.el10_1]
changelog:
  - redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
  - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
  - mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
  - dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
  - dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
  - dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
  - dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.24.1.el10_1]
changelog:
  - audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.25.1.el10_1]
changelog:
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
  - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
  - inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
  - inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.26.1.el10_1]
changelog:
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
  - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.27.1.el10_1]
changelog:
  - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
  - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
  - arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
  - kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
  - mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]


author: Release Engineering <releng@rockylinux.org> - 6.12.0-124.27.1
changelog:
  - Add partial riscv64 support for build root
  - Provide basic VisionFive 2 support
  - Patch MMU for riscv64


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.28.1.el10_1]
changelog:
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.29.1.el10_1]
changelog:
  - gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
  - mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
  - vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
  - vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
  - vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
  - smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
  - smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
  - smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
  - smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
  - smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
  - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
  - smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-128581]
  - smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
  - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
  - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
  - smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
  - smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
  - smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
  - smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
  - smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
  - smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
  - coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.30.1.el10_1]
changelog:
  - io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-129026]
  - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-129026]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-129026]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
  - drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
changelog:
  - i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
  - devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
  - i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
  - scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
  - scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
  - xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
  - xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
  - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
  - s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
  - x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
  - uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
changelog:
  - i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
  - devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
  - i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
  - scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
  - scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
  - scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
  - xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
  - xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
  - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
  - s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
  - x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
  - uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
  - kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.32.1.el10_1]
changelog:
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-124.33.1.el10_1]
changelog:
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.34.1.el10_1]
changelog:
  - ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
  - exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
  - lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
changelog:
  - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
  - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
  - mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
changelog:
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
  - erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
changelog:
  - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
  - bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
  - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
changelog:
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.39.1.el10_1]
changelog:
  - exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.40.1.el10_1]
changelog:
  - s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
  - ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
  - tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
  - gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
  - netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
  - redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
  - net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
  - scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
  - ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.41.1.el10_1]
changelog:
  - vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
  - KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
  - printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
  - printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
  - printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
  - printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
  - printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
  - printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
  - io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
  - gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
  - gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
  - macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
  - dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
  - dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.42.1.el10_1]
changelog:
  - dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
  - dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
  - dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
  - dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
  - dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
  - dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
  - dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
  - dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
  - dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
  - dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
  - dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
  - dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
  - sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
  - sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.43.1.el10_1]
changelog:
  - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
  - drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.44.1.el10_1]
changelog:
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
  - s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.46.1.el10_1]
changelog:
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.47.1.el10_1]
changelog:
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
  - mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.48.1.el10_1]
changelog:
  - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
  - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
  - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
  - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
  - media: uvcvideo: Drop stream->mutex (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
  - media: usb: uvcvideo: Store v4l2_fh pointer in file->private_data (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Introduce dev->meta_formats (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
  - media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Remove stream->is_streaming field (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
  - media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
  - media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
  - media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
  - media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
  - media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
  - media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
  - media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
  - media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
  - media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
  - media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
  - media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
  - media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
  - media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
  - media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
  - media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
  - media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
  - media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
  - media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
  - media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
  - media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
  - media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
  - media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.49.1.el10_1]
changelog:
  - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.50.1.el10_1]
changelog:
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
  - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
  - cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
  - netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
  - netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
  - netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
  - netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
  - netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
  - netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
  - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.53.1.el10_1]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.54.1.el10_1]
changelog:
  - thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
  - thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
  - thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.55.1.el10_1]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.el10]
changelog:
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Frank Liang) [RHEL-107449]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41234]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-103981]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106663] {CVE-2025-38464}
  - sched/deadline: Fix accounting after global limits change (Phil Auld) [RHEL-105980]
  - tools/sched: Add root_domains_dump.py which dumps root domains info (Phil Auld) [RHEL-105980]
  - tools/sched: Add dl_bw_dump.py for printing bandwidth accounting info (Phil Auld) [RHEL-105980]
  - sched/deadline: Initialize dl_servers after SMP (Phil Auld) [RHEL-105980]
  - sched/deadline: Less agressive dl_server handling (Phil Auld) [RHEL-105980]
  - sched/deadline: Reset extra_bw to max_bw when clearing root domains (Phil Auld) [RHEL-105980]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-105980]
  - sched/fair: Always trigger resched at the end of a protected period (Phil Auld) [RHEL-105980]
  - sched/fair: Fix entity's lag with run to parity (Phil Auld) [RHEL-105980]
  - sched/fair: Limit run to parity to the min slice of enqueued entities (Phil Auld) [RHEL-105980]
  - sched/fair: Remove spurious shorter slice preemption (Phil Auld) [RHEL-105980]
  - sched/fair: Fix NO_RUN_TO_PARITY case (Phil Auld) [RHEL-105980]
  - sched: Cancel the slice protection of the idle entity (Phil Auld) [RHEL-105980]
  - sched/fair: Use protect_slice() instead of direct comparison (Phil Auld) [RHEL-105980]
  - sched/deadline: Fix dl_server runtime calculation formula (Phil Auld) [RHEL-105980]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-105980]
  - sched: Fix preemption string of preempt_dynamic_none (Phil Auld) [RHEL-105980]
  - sched/debug: Print the local group's asym_prefer_cpu (Phil Auld) [RHEL-105980]
  - cpufreq/amd-pstate: Update asym_prefer_cpu when core rankings change (Phil Auld) [RHEL-105980]
  - sched/topology: Introduce sched_update_asym_prefer_cpu() (Phil Auld) [RHEL-105980]
  - sched/fair: Use READ_ONCE() to read sg->asym_prefer_cpu (Phil Auld) [RHEL-105980]
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104286] {CVE-2025-38211}


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-124.1.1.el10_1]
changelog:
  - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880]
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352}
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106441] {CVE-2025-38472}
  - netfilter: nf_tables: hide clash bit from userspace (Florian Westphal) [RHEL-106441]
  - selftests: netfilter: conntrack_resize.sh: extend resize test (Florian Westphal) [RHEL-106441]
  - redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov) [RHEL-109610]
  - redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov) [RHEL-109610]
  - redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov) [RHEL-109610]
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111072] {CVE-2025-38566}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111905]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110814] {CVE-2025-38571}
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105134]
  - kselftests/mm: fix khugepaged build broken (Chunyu Hu) [RHEL-112084]
  - iommu/virtio: Make instance lookup robust (Eric Auger) [RHEL-108207]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108262]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108262]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109604]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109604]
  - redhat: set defaults for RHEL 10.1 (Julio Faracco)


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-124.2.1.el10_1]
changelog:
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556}
  - Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491]
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782]
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893]
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83893]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047}
  - x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-124.3.1.el10_1]
changelog:
  - net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-84762]
  - octeon_ep: Fix host hang issue during device reboot (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058]
  - octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058]
  - octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-90058]
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-90058]
  - octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-90058]
  - net: marvell: use ethtool string helpers (Kamal Heib) [RHEL-90058]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114338] {CVE-2025-39698}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CKI Backport Bot) [RHEL-106587] {CVE-2025-38468}
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Audra Mitchell) [RHEL-106609] {CVE-2025-38369}
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107023]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-124.4.1.el10_1]
changelog:
  - ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113251] {CVE-2025-38572}
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114710] {CVE-2025-39761}
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109531] {CVE-2025-38500}
  - net: add reserved fields to devlink_port_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_health_reporter_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_port_region_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_region_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_param (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_dpipe_table_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_linecard_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_ops (Ivan Vecera) [RHEL-111907]
  - net: add reserved fields to devlink_port (Ivan Vecera) [RHEL-111907]
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111156] {CVE-2025-38550}
  - tcp: Correct signedness in skb remaining space calculation (Florian Westphal) [RHEL-107843] {CVE-2025-38463}
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-111791]


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.11.1-2.1
changelog:
  - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows
    privilege escalation on AD-joined Linux systems [rhel-10.1.z]


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-2
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127092)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127092)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127092)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127092)
    Resolves: CVE-2025-12801


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.1
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131422)
  - CVE-2025-65018: heap buffer overflow (RHEL-131435)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133212)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-8.2
changelog:
  - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148323)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148818)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146645)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-6.2
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148254)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-6.1
changelog:
  - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148565)
  - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148588)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.1.el10_1
changelog:
  - tools: Secure guest check for Intel in virt-host-validate (RHEL-111863)
  - qemu: Check if INTEL Trust Domain Extention support is enabled (RHEL-111863)
  - qemucapabilitiesdata: Document '+inteltdx' variant (RHEL-111863)
  - qemucapabilitiestest: Add data for the qemu-10.1.0 dev cycle on x86_64 for the '+inteltdx' variant (RHEL-111863)
  - qemu: Add QEMU_CAPS_TDX_GUEST capability (RHEL-111863)
  - conf: Expose TDX feature in domain capabilities (RHEL-111863)
  - conf: Add tdx as launch security type (RHEL-111863)
  - conf: Validate TDX launchSecurity element mrConfigId/mrOwner/mrOwnerConfig (RHEL-111863)
  - qemu: Add command line and validation for TDX type (RHEL-111863)
  - conf: Expose TDX type in domain launch security capability (RHEL-111863)
  - qemu: Force special parameters enabled for TDX guest (RHEL-111863)
  - qemu: log the crash information for TDX (RHEL-111863)
  - qemu_firmware: Pick the right firmware for TDX guests (RHEL-111863)
  - conf: Add Intel TDX Quote Generation Service(QGS) support (RHEL-111863)
  - qemu: Add command line for TDX Quote Generation Service(QGS) (RHEL-111863)
  - qemu: Add FakeReboot support for TDX guest (RHEL-111863)
  - qemu: Support reboot command in guest (RHEL-111863)
  - qemu: Avoid duplicate FakeReboot for secure guest (RHEL-111863)
  - qemu: Send event VIR_DOMAIN_EVENT_[STOPPED|STARTED] during recreation (RHEL-111863)
  - qemu: Support domain reset command for TDX guest (RHEL-111863)
  - qemuxmlconftest: Add latest version of 'launch-security-tdx*' test data (RHEL-111863)
  - docs: domain: Add documentation for Intel TDX guest (RHEL-111863)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.2.el10_1
changelog:
  - cpu_conf: Make virCPUDefFilterFeatures return void (RHEL-126094)
  - qemu_domain: Simplify qemuDomainFixupCPUs (RHEL-126094)
  - qemu_domain: Fix qemuDomainFixupCPUs (RHEL-126094)
  - qemu_process: Always fix CPUs on reconnect (RHEL-126094)
  - qemu_monitor: Filter CPU features reported by QEMU (RHEL-126094)
  - qemu: Ignore "ht" CPU feature (RHEL-126094)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.5.el10_1
changelog:
  - esx: Allow disk images in subdirectories (RHEL-140865)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140465)
  - esx: URI encode inventory objects twice (RHEL-140465)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4.7.el10_1
changelog:
  - esx: Debug URL just before opening with curl (RHEL-142863)
  - esx: Abstract all URL-creation code into one function (RHEL-142863)
  - esx: Switch to creating URLs using virURIFormat (RHEL-142863)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: David Cantrell <dcantrell@redhat.com> - 1.14.6-12
changelog:
  - Bump the release number because I added a non-packaged file
    (gating.yaml) and need to trigger a gating run again with a new NVR


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-4
changelog:
  - Resolves: RHEL-134483 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-2
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-3
changelog:
  - Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
    file modification via buffer overflow in ngx_http_dav_module


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-4
changelog:
  - Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
    to memory corruption via crafted MP4 file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-5
changelog:
  - Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:1.26.3-6
changelog:
  - Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
    Code Execution via specially crafted MP4 files


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Peter Oliver <git@mavit.org.uk> - 16p-4
changelog:
  - Update build options
  - Drop obsolete options.
  - Specify the correct build flags for ARM and zSeries.


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-85673
  - Support nm connection with empty connection.interface-name. RHEL-84756


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110779
  - Support IPv4 forwarding. RHEL-110788
  - Support IPSec `leftsendcert` option. RHEL-110635


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121112
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121993


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110636
  - Support IPv4 forwarding. RHEL-110789
  - Support IPSec `leftsendcert` option. RHEL-110636


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Use global DNS even for static IP with static DNS. (RHEL-126738)
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-130914)


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85581


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.25.0-5.1
changelog:
  - Fix unwrapping of attribute bound EC keys
  - Fix private secure key blob import
    Resolves: RHEL-131645


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-12
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128397
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128387


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-13
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155811


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-14
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164738
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166237
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166221
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166189
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166205


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-7
changelog:
  - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
    CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
    CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
    Resolves: RHEL-142062
    Resolves: RHEL-141985
    Resolves: RHEL-142053
    Resolves: RHEL-142049
    Resolves: RHEL-142045
    Resolves: RHEL-142041
    Resolves: RHEL-142037
    Resolves: RHEL-142033
    Resolves: RHEL-142029
    Resolves: RHEL-142008
    Resolves: RHEL-142025
    Resolves: RHEL-142021


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 149-5
changelog:
  - Rebuilt to fix: 
    - CVE-2025-61726
    - CVE-2025-61728
    - CVE-2025-61729
    - CVE-2025-68121
    - RHEL-146726
    - RHEL-146931
    - RHEL-147353
    - RHEL-149232


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


